The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 24, 2007 |
| Suse | — | Upgrade kernel-s390xUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-symsUpgrade kernel-umUpgrade um-host-kernelUpgrade kernel-64k-pagesizeUpgrade kernel-pmac64Upgrade kernel-s390x-debugUpgrade kernel-pseries64Upgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-xenUpgrade kernel-smpUpgrade kernel-s390-debugUpgrade kernel-s390Upgrade kernel-xenpaeUpgrade um-host-install-initrdUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade oracleasm-kmp-defaultUpgrade ib-bonding-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-sn2 | Feb 17, 2015 | Sep 24, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.15-29-hppa32Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.15-29-hppa32-smpUpgrade linux-image-2.6.15-29-sparc64-smpUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-29-powerpc64-smpUpgrade linux-image-2.6.15-29-386Upgrade linux-image-2.6.15-29-amd64-k8Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.15-29-hppa64-smpUpgrade linux-image-2.6.15-29-amd64-xeonUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-29-itaniumUpgrade linux-image-2.6.15-29-mckinleyUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-29-serverUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-29-powerpc-smpUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.15-29-686Upgrade linux-image-2.6.15-29-mckinley-smpUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-29-amd64-serverUpgrade linux-image-2.6.15-29-hppa64Upgrade linux-image-2.6.15-29-k7Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-29-sparc64Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.15-29-amd64-genericUpgrade linux-image-2.6.15-29-powerpcUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.15-29-itanium-smpUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-29-server-bigironUpgrade linux-image-2.6.20-16-lowlatency | Nov 8, 2024 | Sep 24, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub