The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 4, 2007 |
| Suse | — | Upgrade kernel-pmac64Upgrade suse-releaseUpgrade kernel-iseries64Upgrade kernel-umUpgrade um-host-kernelUpgrade kernel-symsUpgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-s390Upgrade kernel-sn2Upgrade kernel-s390-debugUpgrade kernel-64k-pagesizeUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-s390xUpgrade kernel-rtUpgrade kernel-bigsmpUpgrade kernel-smpUpgrade kernel-s390x-debugUpgrade kernel-rt_debugUpgrade kernel-pseries64Upgrade kernel-sourceUpgrade kernel-kdumpUpgrade xen-kmpUpgrade kernel-xen | Feb 17, 2015 | Dec 3, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.15-51-itanium-smpUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.15-51-386Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.15-51-powerpc | Nov 8, 2024 | Dec 4, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub