Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-restricted-modules-2.6.15-25-386Upgrade linux-386Upgrade linux-686-smpUpgrade linux-restricted-modules-2.6.15-25-amd64-genericUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-amd64-k8Upgrade linux-image-2.6.15-25-amd64-k8Upgrade linux-image-k7Upgrade linux-restricted-modules-2.6.15-25-686Upgrade linux-power3Upgrade linux-image-powerpc-smpUpgrade linux-image-2.6.15-25-server-bigironUpgrade linux-amd64-k8Upgrade linux-restricted-modules-amd64-xeonUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-k7-smpUpgrade fglrx-controlUpgrade nvidia-glx-legacyUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-server-bigironUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-restricted-modules-386Upgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.10-6-686Upgrade linux-powerpc64-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-power4-smpUpgrade linux-k7Upgrade linux-restricted-modules-2.6.15-25-powerpc-smpUpgrade linux-k7-smpUpgrade linux-image-2.6.15-25-powerpcUpgrade linux-source-2.6.15Upgrade avm-fritz-firmware-2.6.15-25Upgrade linux-powerpcUpgrade linux-source-2.6.10Upgrade fglrx-kernel-sourceUpgrade linux-amd64-serverUpgrade linux-restricted-modules-686Upgrade nvidia-glx-legacy-devUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-power4-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.15-25-386Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.15-25-686Upgrade xorg-driver-fglrxUpgrade linux-image-2.6.15-25-amd64-serverUpgrade linux-restricted-modules-powerpc-smpUpgrade linux-image-2.6.15-25-powerpc-smpUpgrade linux-image-2.6.10-6-power3Upgrade linux-restricted-modules-powerpcUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-386Upgrade linux-power4Upgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-power4Upgrade linux-image-serverUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-power3-smpUpgrade linux-restricted-modules-k7Upgrade linux-amd64-k8-smpUpgrade linux-image-2.6.15-25-k7Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.15-25-serverUpgrade linux-image-powerpc64-smpUpgrade nvidia-glx-devUpgrade linux-powerpc-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-restricted-modules-2.6.15-25-k7Upgrade linux-amd64-xeonUpgrade linux-restricted-modules-2.6.15-25-powerpcUpgrade linux-image-amd64-serverUpgrade linux-restricted-modules-2.6.15-25-amd64-xeonUpgrade linux-image-power3Upgrade linux-image-2.6.15-25-powerpc64-smpUpgrade linux-restricted-modules-amd64-k8Upgrade linux-restricted-modules-2.6.15-25-amd64-k8Upgrade linux-source-2.6.12Upgrade linux-image-2.6.15-25-amd64-genericUpgrade linux-image-amd64-xeonUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-tree-2.6.12Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-amd64-genericUpgrade linux-image-2.6.15-25-amd64-xeonUpgrade linux-image-686Upgrade linux-686Upgrade linux-image-2.6.10-6-power4-smpUpgrade nvidia-glxUpgrade linux-restricted-modules-commonUpgrade linux-restricted-modules-amd64-genericUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-amd64-genericUpgrade linux-server-bigironUpgrade linux-tree-2.6.10Upgrade linux-image-2.6.12-10-amd64-genericUpgrade xorg-driver-fglrx-devUpgrade avm-fritz-firmwareUpgrade linux-image-2.6.12-10-386Upgrade linux-image-power3-smpUpgrade avm-fritz-kernel-sourceUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-serverUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-powerpc | Nov 8, 2024 | May 19, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub