The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, when the Linux Security Modules (LSM) framework is disabled, allows local users to bypass Integrity Measurement Architecture (IMA) rules in opportunistic circumstances by leveraging an administrator's addition of an IMA rule for LSM.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-ec2-baseUpgrade kernel-pae-extraUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-xen-develUpgrade kernel-xen-extraUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-paeUpgrade kernel-ec2Upgrade btrfs-kmp-defaultUpgrade kernel-defaultUpgrade btrfs-kmp-xenUpgrade ext4dev-kmp-ppc64Upgrade hyper-v-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade ext4dev-kmp-paeUpgrade kernel-trace-baseUpgrade kernel-desktop-develUpgrade hyper-v-kmp-pae | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.32-29-powerpc-smp | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub