The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | May 3, 2013 |
| Suse | — | Upgrade ofed-kmp-rtUpgrade cluster-network-kmp-bigsmpUpgrade gfs2-kmp-ppc64Upgrade kernel-rtUpgrade iscsitarget-kmp-bigsmpUpgrade ocfs2-kmp-paeUpgrade gfs2-kmp-bigsmpUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-rt_trace-baseUpgrade ofed-kmp-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-rt-develUpgrade ofed-kmp-bigsmpUpgrade kernel-pae-extraUpgrade ocfs2-kmp-ppc64Upgrade kernel-ppc64Upgrade gfs2-kmp-defaultUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-traceUpgrade kernel-desktop-develUpgrade cluster-network-kmp-ppc64Upgrade kernel-ppc64-develUpgrade kernel-desktop-baseUpgrade ocfs2-kmp-traceUpgrade ocfs2-kmp-bigsmpUpgrade kernel-ppc64-baseUpgrade kernel-bigsmp-baseUpgrade drbd-kmp-bigsmpUpgrade kernel-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade xen-kmp-paeUpgrade kernel-source-vanillaUpgrade lttng-modules-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-default-baseUpgrade kernel-xen-develUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-xenUpgrade kernel-rt-baseUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-xenUpgrade xen-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-pae-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade cluster-network-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-symsUpgrade kernel-default-develUpgrade gfs2-kmp-paeUpgrade kernel-desktopUpgrade kernel-xenUpgrade cluster-network-kmp-traceUpgrade xen-kmp-traceUpgrade kernel-pae-develUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade oracleasm-kmp-bigsmpUpgrade ocfs2-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-trace-baseUpgrade drbd-kmp-rtUpgrade kernel-bigsmp-develUpgrade kernel-xen-extraUpgrade kernel-traceUpgrade ocfs2-kmp-xenUpgrade sle-hae-releaseUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-trace-extraUpgrade kernel-sourceUpgrade drbd-kmp-rt_traceUpgrade kernel-devel | Feb 17, 2015 | May 3, 2013 |
| Ubuntu | — | Upgrade linux-image-3.8.0-19-genericUpgrade linux-image-3.2.0-44-virtualUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.2.0-44-powerpc64-smpUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.2.0-44-omapUpgrade linux-image-3.2.0-44-highbankUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-44-powerpc-smpUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.2.0-44-genericUpgrade linux-image-3.2.0-1432-omap4Upgrade linux-image-3.2.0-44-generic-pae | Nov 8, 2024 | May 3, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub