The dev_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP_SYS_MODULE capability requirement and load arbitrary modules by leveraging the CAP_NET_ADMIN capability.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 1, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-generic-pae | Nov 8, 2024 | Mar 1, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub