The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade oracleasm-kmp-defaultUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade kernel-xen-baseUpgrade ext4dev-kmp-vmiUpgrade kernel-pae-baseUpgrade kernel-xenUpgrade kernel-ppc64-baseUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-vmi-baseUpgrade kernel-vmiUpgrade kernel-symsUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64Upgrade iscsitarget-kmp-defaultUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-default-baseUpgrade kernel-kdump | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.24-23-hppa64 | Nov 8, 2024 | Mar 6, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub