The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-ppc64Upgrade suse-releaseUpgrade kernel-ps3Upgrade kernel-64k-pagesizeUpgrade kernel-smpUpgrade slert-releaseUpgrade kernel-s390-debugUpgrade um-host-kernelUpgrade kernel-sourceUpgrade kernel-s390xUpgrade kernel-rtUpgrade kernel-s390Upgrade kernel-rt_bigsmpUpgrade kernel-vanillaUpgrade kernel-xenpaeUpgrade kernel-pmac64Upgrade kernel-umUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-s390x-debugUpgrade kernel-defaultUpgrade kernel-pseries64Upgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-bigsmpUpgrade kernel-rt_debugUpgrade kernel-kdumpUpgrade um-host-install-initrdUpgrade kernel-rt_timingUpgrade kernel-sn2 | Feb 17, 2015 | Sep 3, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-386 | Nov 8, 2024 | Sep 3, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Sep 3, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Sep 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub