The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenUUpgrade kernel-xenU-develUpgrade kernel-PAE-develUpgrade kernel-hugememUpgrade kernel-smp-develUpgrade kernelUpgrade kernel-smpUpgrade kernel-hugemem-devel | Dec 1, 2016 | Aug 18, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 18, 2009 |
| Suse | — | Upgrade ofedUpgrade acx-kmp-debugUpgrade kernel-debugUpgrade dazuko-kmp-debugUpgrade wlan-ng-kmp-debugUpgrade atl2-kmp-debugUpgrade kernel-docsUpgrade kernel-iseries64Upgrade kernel-paeUpgrade pcc-acpi-kmp-debugUpgrade ib-bonding-kmp-rtUpgrade kernel-debug-extraUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-s390xUpgrade kernel-bigsmpUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-defaultUpgrade xen-kmpUpgrade gspcav-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kqemu-kmp-debugUpgrade kernel-rt_bigsmpUpgrade kernel-xen-extraUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade kernel-s390x-debugUpgrade um-host-install-initrdUpgrade kernel-pseries64Upgrade kernel-xenpaeUpgrade kernel-rt_timingUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-kdumpUpgrade at76_usb-kmp-debugUpgrade omnibook-kmp-debugUpgrade kernel-rt_debugUpgrade uvcvideo-kmp-debugUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-umUpgrade kernel-pmac64Upgrade ofed-kmp-rt_timingUpgrade ivtv-kmp-debugUpgrade kernel-sourceUpgrade ofed-kmp-rt_debugUpgrade um-host-kernelUpgrade kernel-debug-baseUpgrade kernel-s390Upgrade kernel-trace-extraUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade slert-releaseUpgrade kernel-ec2-baseUpgrade ofed-kmp-rtUpgrade kernel-symsUpgrade kernel-pae-extraUpgrade tpctl-kmp-debugUpgrade kernel-ppc64-baseUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-vanillaUpgrade kernel-ppc64Upgrade kernel-sn2Upgrade kernel-rtUpgrade ofed-docUpgrade kernel-ec2-extraUpgrade drbd-kmp-debugUpgrade nouveau-kmp-debugUpgrade ib-bonding-kmp-rt_timingUpgrade vmware-kmp-debugUpgrade appleir-kmp-debugUpgrade virtualbox-ose-kmp-debugUpgrade kernel-smpUpgrade kernel-ppc64-extraUpgrade pcfclock-kmp-debugUpgrade kernel-64k-pagesizeUpgrade kernel-ps3Upgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kernel-s390-debugUpgrade kernel-traceUpgrade acerhk-kmp-debugUpgrade aufs-kmp-debugUpgrade kernel-xen-base | Feb 17, 2015 | Aug 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.24-25-lpiacompat | Nov 8, 2024 | Aug 18, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 18, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 18, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub