The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 4, 2007 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-umUpgrade kernel-64k-pagesizeUpgrade kernel-sn2Upgrade kernel-s390-debugUpgrade um-host-kernelUpgrade kernel-iseries64Upgrade kernel-s390Upgrade um-host-install-initrdUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade kernel-kdumpUpgrade kernel-rtUpgrade kernel-s390x-debugUpgrade kernel-smpUpgrade kernel-s390xUpgrade kernel-xenUpgrade kernel-rt_debugUpgrade kernel-pseries64Upgrade kernel-sourceUpgrade xen-kmp | Feb 17, 2015 | Dec 3, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.15-51-386Upgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.15-51-itanium-smpUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.15-51-powerpcUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.22-14-server | Nov 8, 2024 | Dec 4, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub