The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xenU-develUpgrade kernel-headersUpgrade kernel-xenUUpgrade kernel-PAEUpgrade kernel-smp-develUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-smpUpgrade kernel-hugemem-develUpgrade kernel-hugemem | Dec 1, 2016 | Aug 18, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 18, 2009 |
| Suse | — | Upgrade kernel-paeUpgrade wlan-ng-kmp-debugUpgrade kqemu-kmp-debugUpgrade kernel-xen-extraUpgrade kernel-trace-baseUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade acx-kmp-debugUpgrade um-host-install-initrdUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-pae-baseUpgrade at76_usb-kmp-debugUpgrade kernel-ec2Upgrade atl2-kmp-debugUpgrade omnibook-kmp-debugUpgrade kernel-default-baseUpgrade kernel-debug-extraUpgrade xen-kmpUpgrade kernel-xenUpgrade kernel-xenpaeUpgrade kernel-bigsmpUpgrade gspcav-kmp-debugUpgrade pcc-acpi-kmp-debugUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade dazuko-kmp-debugUpgrade kernel-docsUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-rt_bigsmpUpgrade iscsitarget-kmp-debugUpgrade kernel-pseries64Upgrade kernel-s390x-debugUpgrade ib-bonding-kmp-rtUpgrade ofedUpgrade kernel-kdumpUpgrade kernel-iseries64Upgrade kernel-s390xUpgrade kernel-rt_timingUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-rtUpgrade ib-bonding-kmp-rt_debugUpgrade uvcvideo-kmp-debugUpgrade acerhk-kmp-debugUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-trace-extraUpgrade kernel-umUpgrade tpctl-kmp-debugUpgrade kernel-ppc64-extraUpgrade kernel-64k-pagesizeUpgrade kernel-pmac64Upgrade kernel-sourceUpgrade ofed-kmp-rtUpgrade appleir-kmp-debugUpgrade kernel-smpUpgrade kernel-symsUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kernel-ppc64Upgrade vmware-kmp-debugUpgrade kernel-s390-debugUpgrade kernel-sn2Upgrade kernel-vanillaUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade ofed-kmp-rt_debugUpgrade kernel-pae-extraUpgrade um-host-kernelUpgrade kernel-ps3Upgrade kernel-ppc64-baseUpgrade slert-releaseUpgrade kernel-ec2-baseUpgrade aufs-kmp-debugUpgrade ivtv-kmp-debugUpgrade kernel-s390Upgrade virtualbox-ose-kmp-debugUpgrade nouveau-kmp-debugUpgrade kernel-debug-baseUpgrade ib-bonding-kmp-rt_timingUpgrade ofed-kmp-rt_timingUpgrade drbd-kmp-debugUpgrade pcfclock-kmp-debugUpgrade ofed-docUpgrade kernel-ec2-extra | Feb 17, 2015 | Aug 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-sparc64-smp | Nov 8, 2024 | Aug 18, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 18, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 18, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub