The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.35-32-server | Nov 8, 2024 | Jun 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub