wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-power3Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.8.1-6-powerpcUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.8.1-6-amd64-xeonUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.8.1-6-powerpc-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.8.1-6-amd64-genericUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.8.1-6-power4Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.8.1-6-power3-smpUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.12-10-powerpc64-smp | Nov 8, 2024 | Jan 6, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub