The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-desktop-baseUpgrade kernel-vmi-baseUpgrade kernel-debug-baseUpgrade kernel-vmiUpgrade kernel-rt-baseUpgrade preload-kmp-defaultUpgrade preload-kmp-desktopUpgrade kernel-desktop-develUpgrade kernel-syms-rtUpgrade kernel-vanilla-baseUpgrade kernel-source-rtUpgrade kernel-vmi-develUpgrade kernel-ec2-extraUpgrade kernel-sourceUpgrade brocade-bna-kmp-rtUpgrade kernel-rt_trace-baseUpgrade kernel-rt-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rtUpgrade kernel-rt_traceUpgrade kernel-traceUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade kernel-rt_trace-develUpgrade kernel-default-develUpgrade iscsitarget-kmp-rtUpgrade kernel-defaultUpgrade kernel-desktopUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-source-vanillaUpgrade ofed-kmp-rtUpgrade kernel-debugUpgrade kernel-vanilla | Feb 17, 2015 | Dec 22, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub