The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-hugemem-develUpgrade kernel-PAE-develUpgrade kernel-smpUpgrade kernel-hugememUpgrade kernel-develUpgrade kernel-smp-develUpgrade kernel-PAEUpgrade kernel-xenU-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-xenU | Dec 1, 2016 | Jul 16, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 16, 2009 |
| Suse | — | Upgrade kqemu-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade nouveau-kmp-debugUpgrade aufs-kmp-traceUpgrade gspcav-kmp-debugUpgrade drbd-kmp-traceUpgrade virtualbox-ose-kmp-debugUpgrade ofed-kmp-traceUpgrade kernel-ec2-baseUpgrade kqemu-kmp-traceUpgrade kernel-trace-extraUpgrade kvm-kmp-traceUpgrade kernel-pae-extraUpgrade oracleasm-kmp-debugUpgrade ofed-kmp-debugUpgrade kernel-trace-baseUpgrade brocade-bfa-kmp-traceUpgrade kernel-default-baseUpgrade intel-iamt-heci-kmp-traceUpgrade kernel-docsUpgrade pcc-acpi-kmp-debugUpgrade pcfclock-kmp-traceUpgrade kernel-kdumpUpgrade pcfclock-kmp-debugUpgrade kernel-ppc64-baseUpgrade aufs-kmp-debugUpgrade iscsitarget-kmp-traceUpgrade kernel-ps3Upgrade lirc-kmp-traceUpgrade kernel-defaultUpgrade vmware-kmp-debugUpgrade brocade-bfa-kmp-debugUpgrade atl2-kmp-debugUpgrade kernel-ec2-extraUpgrade virtualbox-ose-kmp-traceUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade oracleasm-kmp-traceUpgrade at76_usb-kmp-debugUpgrade kernel-xenUpgrade acx-kmp-debugUpgrade ivtv-kmp-debugUpgrade kernel-paeUpgrade kernel-debugUpgrade dazuko-kmp-traceUpgrade tpctl-kmp-debugUpgrade omnibook-kmp-debugUpgrade appleir-kmp-debugUpgrade kernel-debug-baseUpgrade dazuko-kmp-debugUpgrade kernel-ppc64-extraUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-sourceUpgrade kernel-debug-extraUpgrade acerhk-kmp-debugUpgrade uvcvideo-kmp-debugUpgrade kernel-traceUpgrade kernel-xen-extraUpgrade intel-iamt-heci-kmp-debugUpgrade kernel-pae-baseUpgrade drbd-kmp-debugUpgrade vmware-kmp-traceUpgrade kernel-vanillaUpgrade wlan-ng-kmp-debug | Feb 17, 2015 | Jul 16, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.28-14-ixp4xxUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.28-14-serverUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.28-14-lpiaUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.28-14-virtualUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.28-14-iop32xUpgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.28-14-genericUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.28-14-imx51Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.28-14-versatileUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.24-24-386 | Nov 8, 2024 | Jul 16, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Jul 16, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Jul 16, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub