The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.28-13-versatile | Nov 8, 2024 | May 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub