The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-firmwareUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debugUpgrade perfUpgrade kernel-PAE-develUpgrade python-perfUpgrade kernel-headers | Dec 1, 2016 | Feb 17, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 18, 2013 |
| Suse | — | Upgrade kernel-vanilla-devel-debuginfoUpgrade gfs2-kmp-xenUpgrade kernel-default-debuginfoUpgrade btrfs-kmp-paeUpgrade gfs2-kmp-traceUpgrade gfs2-kmp-paeUpgrade kernel-traceUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade hyper-v-kmp-defaultUpgrade ocfs2-kmp-xenUpgrade kernel-trace-debugsourceUpgrade kernel-debug-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-xenUpgrade kernel-kdumpUpgrade kernel-trace-base-debuginfoUpgrade kernel-paeUpgrade xen-kmp-paeUpgrade kernel-desktop-develUpgrade ocfs2-kmp-ppc64Upgrade kernel-source-vanillaUpgrade kernel-trace-baseUpgrade kernel-default-base-debuginfoUpgrade xen-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-vanilla-baseUpgrade kernel-ec2Upgrade kernel-xen-base-debuginfoUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-vanilla-develUpgrade kernel-debug-baseUpgrade kernel-vmiUpgrade kernel-default-devel-debuginfoUpgrade kernel-default-baseUpgrade kernel-smpUpgrade kernel-default-develUpgrade hyper-v-kmp-traceUpgrade kernel-develUpgrade kernel-desktop-debuginfoUpgrade kernel-pae-debuginfoUpgrade cluster-network-kmp-traceUpgrade kernel-xen-debugsourceUpgrade gfs2-kmp-ppc64Upgrade kernel-debug-devel-debuginfoUpgrade sle-hae-releaseUpgrade ext4dev-kmp-traceUpgrade kernel-pae-debugsourceUpgrade kernel-bigsmpUpgrade xen-kmp-traceUpgrade kernel-pae-base-debuginfoUpgrade kernel-trace-debuginfoUpgrade gfs2-kmp-defaultUpgrade kernel-iseries64Upgrade kernel-trace-extraUpgrade kernel-vmipaeUpgrade kernel-defaultUpgrade kernel-pae-devel-debuginfoUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ppc64-baseUpgrade kernel-ec2-devel-debuginfoUpgrade ocfs2-kmp-traceUpgrade kernel-debug-debuginfoUpgrade kernel-xen-develUpgrade kernel-debug-base-debuginfoUpgrade kernel-xen-debuginfoUpgrade kernel-symsUpgrade kernel-xenpaeUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-xen-extraUpgrade ext4dev-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-ec2-debugsourceUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-default-manUpgrade btrfs-kmp-xenUpgrade kernel-kdumppaeUpgrade kernel-ec2-base-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-desktop-baseUpgrade kernel-ec2-debuginfoUpgrade cluster-network-kmp-paeUpgrade kernel-default-extraUpgrade kernel-pae-baseUpgrade kernel-vanillaUpgrade kernel-docsUpgrade cluster-network-kmp-xenUpgrade kernel-desktop-debugsourceUpgrade kernel-debugUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade kernel-desktop-base-debuginfoUpgrade btrfs-kmp-defaultUpgrade kernel-desktopUpgrade kernel-pae-extraUpgrade kernel-ec2-develUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-pae-develUpgrade kernel-ppc64-develUpgrade kernel-default-debugsourceUpgrade ext4dev-kmp-pae | Feb 17, 2015 | Feb 17, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-3.2.0-39-generic-paeUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-3.5.0-26-highbankUpgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.5.0-26-genericUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-3.5.0-26-omapUpgrade linux-image-3.5.0-26-powerpc-smpUpgrade linux-image-3.5.0-26-powerpc64-smpUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.0.0-32-omapUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.5.0-221-omap4 | Nov 8, 2024 | Feb 18, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub