Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade lkcdutils-netdump-serverUpgrade kernel-debugUpgrade kernel-s390xUpgrade gfxbootUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-xenUpgrade rsyncUpgrade um-host-install-initrdUpgrade kernel-kdumpUpgrade device-mapperUpgrade ltrace-32bitUpgrade kernel-pseries64Upgrade kernel-sn2Upgrade kernel-ppc64Upgrade kernel-64k-pagesizeUpgrade kernel-sourceUpgrade lkcdutilsUpgrade device-mapper-64bitUpgrade kernel-smpUpgrade um-host-kernelUpgrade kernel-defaultUpgrade ltrace-64bitUpgrade oprofileUpgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-xenpaeUpgrade device-mapper-32bitUpgrade icecreamUpgrade device-mapper-x86Upgrade kernel-symsUpgrade ltraceUpgrade sysstatUpgrade kernel-s390 | Feb 17, 2015 | Jul 18, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.10-6-k7-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.15-26-hppa64Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.12-10-amd64-k8 | Nov 8, 2024 | Jul 18, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub