The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-PAE-develUpgrade kernel-firmwareUpgrade kernelUpgrade perfUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-devel | Dec 1, 2016 | Feb 17, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Feb 18, 2013 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-traceUpgrade kernel-desktop-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-default-devel-debuginfoUpgrade kernel-vanilla-develUpgrade kernel-vmiUpgrade kernel-default-baseUpgrade kernel-vanilla-debugsourceUpgrade ext4dev-kmp-traceUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-trace-base-debuginfoUpgrade sle-hae-releaseUpgrade kernel-pae-debugsourceUpgrade cluster-network-kmp-traceUpgrade xen-kmp-traceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-paeUpgrade kernel-xenUpgrade gfs2-kmp-ppc64Upgrade kernel-kdumpUpgrade kernel-xen-debugsourceUpgrade kernel-develUpgrade kernel-ec2Upgrade kernel-vanilla-devel-debuginfoUpgrade kernel-pae-debuginfoUpgrade hyper-v-kmp-traceUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-defaultUpgrade kernel-bigsmpUpgrade hyper-v-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade gfs2-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade ocfs2-kmp-xenUpgrade xen-kmp-paeUpgrade ext4dev-kmp-xenUpgrade kernel-trace-baseUpgrade btrfs-kmp-paeUpgrade kernel-trace-debugsourceUpgrade kernel-smpUpgrade kernel-debug-debugsourceUpgrade kernel-pae-base-debuginfoUpgrade gfs2-kmp-traceUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-vanilla-baseUpgrade kernel-default-base-debuginfoUpgrade ocfs2-kmp-ppc64Upgrade kernel-source-vanillaUpgrade kernel-desktop-develUpgrade xen-kmp-defaultUpgrade kernel-xen-base-debuginfoUpgrade kernel-trace-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade kernel-default-manUpgrade kernel-xen-debuginfoUpgrade kernel-desktop-baseUpgrade kernel-desktop-base-debuginfoUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-desktop-devel-debuginfoUpgrade kernel-desktop-debugsourceUpgrade kernel-vanilla-debuginfoUpgrade kernel-iseries64Upgrade ext4dev-kmp-defaultUpgrade kernel-default-debugsourceUpgrade kernel-xenpaeUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-ec2-debugsourceUpgrade ext4dev-kmp-paeUpgrade kernel-xen-extraUpgrade kernel-debug-develUpgrade kernel-symsUpgrade ocfs2-kmp-traceUpgrade kernel-debugUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-xen-baseUpgrade kernel-desktopUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-ec2-develUpgrade kernel-ppc64-develUpgrade kernel-pae-extraUpgrade kernel-pae-develUpgrade btrfs-kmp-defaultUpgrade cluster-network-kmp-paeUpgrade kernel-ec2-baseUpgrade btrfs-kmp-xenUpgrade kernel-ec2-extraUpgrade kernel-default-extraUpgrade kernel-xen-devel-debuginfoUpgrade kernel-trace-extraUpgrade kernel-ec2-base-debuginfoUpgrade kernel-defaultUpgrade kernel-vanillaUpgrade kernel-ec2-debuginfoUpgrade kernel-docsUpgrade cluster-network-kmp-defaultUpgrade cluster-network-kmp-xenUpgrade kernel-pae-devel-debuginfoUpgrade kernel-kdumppaeUpgrade kernel-debug-base-debuginfoUpgrade kernel-pae-baseUpgrade kernel-vmipaeUpgrade ocfs2-kmp-pae | Feb 17, 2015 | Feb 17, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.5.0-221-omap4Upgrade linux-image-3.5.0-26-genericUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.0.0-32-omapUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-2.6.32-46-386Upgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.0.0-32-powerpc | Nov 8, 2024 | Feb 18, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub