The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-desktopUpgrade ofed-kmp-rtUpgrade kernel-pmac64Upgrade kernel-default-baseUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-s390Upgrade kernel-iseries64Upgrade um-host-install-initrdUpgrade kernel-ec2Upgrade kernel-xenpaeUpgrade kernel-vmipaeUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade xen-kmpUpgrade kernel-source-vanillaUpgrade kernel-vanillaUpgrade kernel-kdumppaeUpgrade kernel-bigsmpUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-sn2Upgrade kernel-s390x-debugUpgrade kernel-debugUpgrade kernel-paeUpgrade kernel-debug-develUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade brocade-bna-kmp-rtUpgrade kernel-umUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-debug-baseUpgrade kernel-smpUpgrade kernel-rt_trace-baseUpgrade preload-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-desktop-develUpgrade kernel-pae-baseUpgrade kernel-rt_trace-develUpgrade kernel-vmiUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-vmi-develUpgrade kernel-rt_traceUpgrade kernel-rt-baseUpgrade kernel-ec2-extraUpgrade kernel-ppc64Upgrade kernel-s390-debugUpgrade kernel-traceUpgrade kernel-desktop-baseUpgrade kernel-s390xUpgrade kernel-ec2-baseUpgrade um-host-kernelUpgrade kernel-pseries64Upgrade kernel-vmi-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-ec2-develUpgrade preload-kmp-desktopUpgrade kernel-64k-pagesizeUpgrade kernel-vanilla-devel | Feb 17, 2015 | Dec 30, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.35-23-powerpcUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-26-genericUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-26-powerpc-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-26-versatileUpgrade linux-image-2.6.32-26-sparc64-smpUpgrade linux-image-2.6.35-23-powerpc-smpUpgrade linux-image-2.6.32-26-sparc64Upgrade linux-image-2.6.35-23-versatileUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-23-generic-paeUpgrade linux-image-2.6.32-310-ec2Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-26-powerpcUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-23-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-26-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.32-26-preemptUpgrade linux-image-2.6.32-26-lpiaUpgrade linux-image-2.6.32-26-386Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.35-23-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.35-23-omapUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.35-23-serverUpgrade linux-image-2.6.32-26-virtualUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.35-23-virtualUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-26-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-26-generic-paeUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-26-ia64Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-28-386 | Nov 8, 2024 | Dec 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub