The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | Jul 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 18, 2011 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-vmiUpgrade kernel-xenpaeUpgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-bigsmpUpgrade kernel-xenUpgrade kernel-vmipaeUpgrade kernel-kdumppae | Feb 17, 2015 | Jul 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-virtual | Nov 8, 2024 | Jul 18, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jul 18, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub