Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-desktopUpgrade hyper-v-kmp-defaultUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-traceUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-bigsmpUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-rtUpgrade kernel-pae-extraUpgrade gfs2-kmp-traceUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-rt_trace-develUpgrade kernel-paeUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-ec2-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-vanillaUpgrade kernel-bigsmp-develUpgrade kernel-ec2Upgrade kernel-xen-extraUpgrade kernel-default-extraUpgrade ext4dev-kmp-paeUpgrade ocfs2-kmp-bigsmpUpgrade kernel-bigsmp-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade hyper-v-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade cluster-network-kmp-defaultUpgrade kernel-desktop-baseUpgrade kernel-debug-baseUpgrade lttng-modules-kmp-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt-develUpgrade xen-kmp-paeUpgrade kernel-vanilla-develUpgrade btrfs-kmp-xenUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-xenUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-debugUpgrade gfs2-kmp-paeUpgrade iscsitarget-kmp-rtUpgrade iscsitarget-kmp-rt_traceUpgrade ext4dev-kmp-traceUpgrade kernel-xen-baseUpgrade btrfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade kernel-ppc64Upgrade cluster-network-kmp-bigsmpUpgrade cluster-network-kmp-xenUpgrade xen-kmp-defaultUpgrade cluster-network-kmp-rtUpgrade kernel-rt_traceUpgrade kernel-source-rtUpgrade ocfs2-kmp-ppc64Upgrade kernel-xen-develUpgrade cluster-network-kmp-ppc64Upgrade kernel-docsUpgrade kernel-trace-extraUpgrade ofed-kmp-rtUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-paeUpgrade ofed-kmp-rt_traceUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-ppc64-baseUpgrade kernel-desktop-develUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade gfs2-kmp-xenUpgrade kernel-source-vanillaUpgrade hyper-v-kmp-traceUpgrade gfs2-kmp-bigsmpUpgrade ocfs2-kmp-rt_traceUpgrade kernel-trace-baseUpgrade kernel-rt-baseUpgrade ext4dev-kmp-xenUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-baseUpgrade kernel-trace-devel | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-3.2.0-53-generic-paeUpgrade linux-image-2.6.32-50-genericUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-355-ec2Upgrade linux-image-2.6.32-50-virtualUpgrade linux-image-3.2.0-53-virtualUpgrade linux-image-3.2.0-53-powerpc-smpUpgrade linux-image-3.2.0-53-omapUpgrade linux-image-3.5.0-39-genericUpgrade linux-image-3.8.0-29-genericUpgrade linux-image-3.2.0-53-powerpc64-smpUpgrade linux-image-2.6.32-50-powerpc64-smpUpgrade linux-image-3.5.0-231-omap4Upgrade linux-image-3.2.0-1437-omap4Upgrade linux-image-3.5.0-39-omapUpgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-3.5.0-39-powerpc64-smpUpgrade linux-image-2.6.32-50-lpiaUpgrade linux-image-2.6.32-50-versatileUpgrade linux-image-3.2.0-53-genericUpgrade linux-image-2.6.32-50-serverUpgrade linux-image-2.6.32-50-ia64Upgrade linux-image-2.6.32-50-386Upgrade linux-image-3.2.0-53-highbankUpgrade linux-image-3.5.0-39-highbankUpgrade linux-image-2.6.32-50-preemptUpgrade linux-image-3.5.0-39-powerpc-smp | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub