VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 15, 2008 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-iseries64Upgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-xenUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-xenpaeUpgrade suse-release | Feb 17, 2015 | Jan 15, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-51-sparc64-smpUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.15-51-686Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.15-51-amd64-genericUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.15-51-amd64-xeonUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-51-hppa32-smpUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-51-hppa64-smpUpgrade linux-image-2.6.15-51-hppa32Upgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.22-14-mckinleyUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-51-server-bigironUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-51-powerpc64-smpUpgrade linux-image-2.6.15-51-itaniumUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.15-51-amd64-k8Upgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.15-51-hppa64Upgrade linux-image-2.6.15-51-sparc64Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.15-51-mckinley-smpUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.15-51-mckinleyUpgrade linux-image-2.6.15-51-amd64-serverUpgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.15-51-k7Upgrade linux-image-2.6.15-51-powerpcUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-51-serverUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.15-51-powerpc-smpUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.15-51-itanium-smpUpgrade linux-image-2.6.15-51-386 | Nov 8, 2024 | Jan 15, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub