The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.15-54-mckinley | Nov 8, 2024 | May 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub