The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-headers | Dec 1, 2016 | Apr 22, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 22, 2009 |
| Suse | — | Upgrade kernel-sourceUpgrade ext4dev-kmp-vmiUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-vmi-baseUpgrade ext4dev-kmp-xenUpgrade kernel-paeUpgrade kernel-vmiUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-ppc64Upgrade kernel-pae-baseUpgrade kernel-kdumpUpgrade kernel-default-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-default | Feb 17, 2015 | Jul 10, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.28-13-virtualUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.28-13-ixp4xx | Nov 8, 2024 | Apr 22, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Apr 22, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Apr 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub