The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-smp-develUpgrade kernel-xenUUpgrade kernel-xenUpgrade kernel-hugemem-develUpgrade kernel-xenU-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-debug-devel | Dec 1, 2016 | Sep 24, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 24, 2010 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade ext4dev-kmp-xenUpgrade kernel-macrosUpgrade ext4dev-kmp-ppc64Upgrade kernel-vmiUpgrade kernel-obs-buildUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-paeUpgrade kernel-defaultUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade kernel-ppc64Upgrade kernel-kdumpUpgrade kernel-vmi-baseUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-symsUpgrade oracleasm-kmp-defaultUpgrade kernel-traceUpgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-docs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-24-versatileUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-24-sparc64-dbgsymUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-24-ia64-dbgsymUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-24-386-dbgsymUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.32-24-sparc64-smp-dbgsymUpgrade linux-image-2.6.32-24-preempt-dbgsymUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-24-generic-dbgsymUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-24-powerpc-dbgsymUpgrade linux-image-2.6.32-24-powerpc-smp-dbgsymUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.32-24-powerpc64-smp-dbgsymUpgrade linux-image-2.6.32-24-server-dbgsymUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-24-versatile-dbgsymUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-24-generic-pae-dbgsymUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-24-lpia-dbgsym | Nov 8, 2024 | Sep 24, 2010 |
| Vmsa 2010 0017 | — | Upgrade VMware ESX 4.0 to build number 332073Upgrade VMware ESX 4.1 to build number 320137 | Dec 6, 2010 | Sep 24, 2010 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.1 to build number 348481Upgrade VMware ESX 4.0 to build number 360236 | Feb 16, 2011 | Sep 24, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub