The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-sourceUpgrade kernel-vmi-baseUpgrade kernel-rtUpgrade brocade-bna-kmp-rtUpgrade kernel-ec2-extraUpgrade kernel-rt_traceUpgrade kernel-traceUpgrade kernel-source-rtUpgrade kernel-rt-baseUpgrade kernel-vanilla-baseUpgrade kernel-vmi-develUpgrade kernel-debug-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-desktop-baseUpgrade kernel-vmiUpgrade preload-kmp-desktopUpgrade kernel-rt_trace-develUpgrade preload-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade kernel-desktop-develUpgrade kernel-pae-baseUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-ec2-baseUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-symsUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-trace-baseUpgrade kernel-debugUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade kernel-xen-baseUpgrade ofed-kmp-rtUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-vanillaUpgrade kernel-ec2-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-desktop | Feb 17, 2015 | Dec 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub