The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-devel | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2012 |
| Suse | — | Upgrade kernel-xen-devel-debuginfoUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-xen-debuginfoUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade cluster-network-kmp-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-vanilla-devel-debuginfoUpgrade drbd-kmp-rt_traceUpgrade kernel-vanilla-baseUpgrade kernel-pae-base-debuginfoUpgrade kernel-rt_trace-develUpgrade kernel-debugUpgrade kernel-desktop-debuginfoUpgrade kernel-xen-debugsourceUpgrade kernel-xenUpgrade kernel-default-debuginfoUpgrade kernel-vanillaUpgrade kernel-develUpgrade kernel-desktopUpgrade kernel-trace-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-paeUpgrade kernel-ec2-base-debuginfoUpgrade kernel-symsUpgrade kernel-ec2-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade cluster-network-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-xen-develUpgrade kernel-debug-debugsourceUpgrade kernel-default-debugsourceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-trace-develUpgrade kernel-syms-rtUpgrade kernel-traceUpgrade kernel-trace-base-debuginfoUpgrade kernel-desktop-baseUpgrade drbd-kmp-rtUpgrade kernel-desktop-debugsourceUpgrade kernel-rtUpgrade kernel-vanilla-develUpgrade kernel-pae-devel-debuginfoUpgrade kernel-source-rtUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-extraUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade kernel-pae-debugsourceUpgrade kernel-ec2-baseUpgrade kernel-ec2-debuginfoUpgrade ocfs2-kmp-rtUpgrade kernel-desktop-develUpgrade kernel-trace-debugsourceUpgrade kernel-debug-baseUpgrade kernel-debug-base-debuginfoUpgrade kernel-sourceUpgrade brocade-bna-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-vanilla-debuginfoUpgrade kernel-xen-base-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-pae-baseUpgrade kernel-default-devel-debuginfoUpgrade kernel-rt_trace-baseUpgrade kernel-pae-debuginfoUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2Upgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rt_trace | Dec 12, 2013 | May 17, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-345-ec2Upgrade linux-image-3.0.0-20-genericUpgrade linux-image-3.0.0-20-generic-paeUpgrade linux-image-3.2.0-24-virtualUpgrade linux-image-3.0.0-20-powerpc-smpUpgrade linux-image-3.2.0-24-genericUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-3.2.0-24-generic-paeUpgrade linux-image-2.6.32-41-powerpc-smpUpgrade linux-image-2.6.32-41-386Upgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.32-41-preemptUpgrade linux-image-2.6.32-41-genericUpgrade linux-image-2.6.32-41-virtualUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.32-41-powerpc64-smpUpgrade linux-image-3.0.0-20-powerpc64-smpUpgrade linux-image-2.6.32-41-sparc64-smpUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.2.0-24-powerpc64-smpUpgrade linux-image-2.6.32-41-lpiaUpgrade linux-image-3.0.0-20-powerpcUpgrade linux-image-2.6.32-41-generic-paeUpgrade linux-image-3.2.0-24-powerpc-smpUpgrade linux-image-3.0.0-20-omapUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.32-41-ia64Upgrade linux-image-3.2.0-1413-omap4Upgrade linux-image-3.2.0-24-omapUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-3.0.0-20-serverUpgrade linux-image-2.6.32-41-serverUpgrade linux-image-2.6.32-41-sparc64Upgrade linux-image-3.0.0-20-virtualUpgrade linux-image-3.0.0-1210-omap4Upgrade linux-image-2.6.32-41-versatileUpgrade linux-image-2.6.32-41-powerpcUpgrade linux-image-2.6.38-15-virtual | Nov 8, 2024 | May 17, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub