The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.24-26-sparc64-smpUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.15-55-k7 | Nov 8, 2024 | Nov 6, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub