kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-devel | Dec 1, 2016 | Mar 1, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 1, 2013 |
| Suse | — | Upgrade kernel-trace-baseUpgrade kernel-rt-develUpgrade kernel-ec2-develUpgrade kernel-xen-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-desktop-develUpgrade kernel-syms-rtUpgrade kernel-ec2-extraUpgrade kernel-vmi-baseUpgrade brocade-bna-kmp-rtUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-rtUpgrade kernel-ec2-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-xenpaeUpgrade kernel-kdumppaeUpgrade kernel-ppc64Upgrade kernel-smpUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xen-develUpgrade kernel-desktop-baseUpgrade kernel-vmipaeUpgrade kernel-source-rtUpgrade kernel-vanilla-develUpgrade kernel-develUpgrade drbd-kmp-rtUpgrade kernel-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-iseries64Upgrade kernel-rt_trace-baseUpgrade kernel-bigsmpUpgrade kernel-rtUpgrade kernel-rt-baseUpgrade kernel-desktopUpgrade kernel-symsUpgrade kernel-ec2Upgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-debug-baseUpgrade ocfs2-kmp-rtUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-vmiUpgrade preload-kmp-desktopUpgrade kernel-source-vanillaUpgrade kernel-vanilla-baseUpgrade preload-kmp-defaultUpgrade kernel-vmi-develUpgrade drbd-kmp-rt_traceUpgrade kernel-source | Feb 17, 2015 | Mar 1, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-386 | Nov 8, 2024 | Mar 1, 2013 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub