The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernelUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-devel | Dec 1, 2016 | Feb 28, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 28, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2011 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-vanilla-baseUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-traceUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade kernel-pae-baseUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-macrosUpgrade kernel-xen-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-default-extraUpgrade kernel-docs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-1209-omap4 | Nov 8, 2024 | Feb 28, 2011 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Feb 28, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub