The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Jan 27, 2012 |
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-docUpgrade perfUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-devel | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2012 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-paeUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-ppc64-base | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-15-genericUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-3.0.0-1207-omap4Upgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-3.0.0-15-virtual | Nov 8, 2024 | Jan 27, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub