The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-paeUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-pae-baseUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-obs-buildUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-xen-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-22-generic-paeUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-22-lpia-dbgsymUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.32-22-sparc64-dbgsymUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-22-powerpcUpgrade linux-image-2.6.33-501-omapUpgrade linux-image-2.6.32-22-386Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-22-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-22-lpiaUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-22-preempt-dbgsymUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-22-sparc64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-22-ia64Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.32-22-sparc64-smp-dbgsymUpgrade linux-image-2.6.32-22-386-dbgsymUpgrade linux-image-2.6.32-22-virtualUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-22-powerpc-smp-dbgsymUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-802-st1-5Upgrade linux-image-2.6.32-22-serverUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-22-genericUpgrade linux-image-2.6.32-22-powerpc64-smp-dbgsymUpgrade linux-image-2.6.32-22-server-dbgsymUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-205-doveUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-22-versatile-dbgsymUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-22-generic-dbgsymUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.32-22-powerpc-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-22-versatileUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-22-ia64-dbgsymUpgrade linux-image-2.6.32-22-generic-pae-dbgsymUpgrade linux-image-2.6.32-306-ec2Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-22-powerpc-dbgsymUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-22-preemptUpgrade linux-image-2.6.32-22-sparc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-608-imx51 | Nov 8, 2024 | Apr 12, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub