The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-smpUpgrade kernel-xenUpgrade kernel-smp-develUpgrade kernel-docUpgrade kernel-xenU-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-hugemem-develUpgrade kernelUpgrade kernel-xenUUpgrade kernel-hugememUpgrade kernel-PAE-develUpgrade kernel-headers | Dec 1, 2016 | Sep 29, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 29, 2008 |
| Suse | — | Upgrade um-host-kernelUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-sourceUpgrade kernel-s390xUpgrade kernel-debugUpgrade kernel-64k-pagesizeUpgrade kernel-xenUpgrade kernel-iseries64Upgrade kernel-s390Upgrade kernel-xenpaeUpgrade kernel-symsUpgrade kernel-sn2Upgrade kernel-smpUpgrade kernel-kdumpUpgrade um-host-install-initrdUpgrade kernel-s390-debugUpgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-s390x-debugUpgrade kernel-ppc64Upgrade suse-releaseUpgrade kernel-default | Feb 17, 2015 | Sep 29, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.22-16-cell | Nov 8, 2024 | Sep 29, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Sep 29, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Sep 29, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub