Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-develUpgrade kernel-rt_traceUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade btrfs-kmp-xenUpgrade kernel-ec2-extraUpgrade gfs2-kmp-ppc64Upgrade gfs2-kmp-bigsmpUpgrade btrfs-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-xen-baseUpgrade drbd-kmp-rt_traceUpgrade kernel-ppc64-baseUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-rtUpgrade gfs2-kmp-paeUpgrade iscsitarget-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade sle-hae-releaseUpgrade cluster-network-kmp-rt_traceUpgrade ofed-kmp-rt_traceUpgrade kernel-trace-baseUpgrade lttng-modules-kmp-rt_traceUpgrade cluster-network-kmp-bigsmpUpgrade kernel-source-vanillaUpgrade ofed-kmp-rtUpgrade cluster-network-kmp-ppc64Upgrade kernel-xen-develUpgrade kernel-pae-develUpgrade iscsitarget-kmp-rtUpgrade kernel-default-baseUpgrade kernel-ec2-baseUpgrade kernel-trace-develUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-traceUpgrade kernel-docsUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-xenUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-defaultUpgrade gfs2-kmp-xenUpgrade cluster-network-kmp-xenUpgrade kernel-debugUpgrade kernel-rt-baseUpgrade kernel-desktop-develUpgrade kernel-trace-extraUpgrade kernel-ppc64Upgrade hyper-v-kmp-traceUpgrade kernel-syms-rtUpgrade cluster-network-kmp-traceUpgrade btrfs-kmp-paeUpgrade kernel-debug-baseUpgrade kernel-pae-baseUpgrade kernel-bigsmpUpgrade kernel-desktop-baseUpgrade ocfs2-kmp-traceUpgrade drbd-kmp-rtUpgrade ocfs2-kmp-rtUpgrade xen-kmp-traceUpgrade ocfs2-kmp-bigsmpUpgrade ext4dev-kmp-defaultUpgrade kernel-rt_trace-develUpgrade hyper-v-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade kernel-xenUpgrade kernel-vanillaUpgrade kernel-rtUpgrade kernel-xen-extraUpgrade kernel-paeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade cluster-network-kmp-defaultUpgrade kernel-default-extraUpgrade ext4dev-kmp-paeUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-pae-extraUpgrade kernel-default-develUpgrade lttng-modules-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-bigsmp-baseUpgrade hyper-v-kmp-paeUpgrade kernel-desktopUpgrade kernel-bigsmp-develUpgrade kernel-default-manUpgrade kernel-ppc64-develUpgrade ocfs2-kmp-paeUpgrade gfs2-kmp-traceUpgrade kernel-ec2Upgrade kernel-trace | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-50-genericUpgrade linux-image-3.8.0-29-genericUpgrade linux-image-3.2.0-53-generic-paeUpgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-355-ec2Upgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-3.2.0-53-virtualUpgrade linux-image-3.2.0-53-powerpc-smpUpgrade linux-image-3.5.0-39-genericUpgrade linux-image-2.6.32-50-virtualUpgrade linux-image-3.2.0-53-omapUpgrade linux-image-2.6.32-50-preemptUpgrade linux-image-3.2.0-53-powerpc64-smpUpgrade linux-image-3.5.0-231-omap4Upgrade linux-image-2.6.32-50-386Upgrade linux-image-3.2.0-53-genericUpgrade linux-image-2.6.32-50-versatileUpgrade linux-image-3.5.0-39-omapUpgrade linux-image-3.2.0-1437-omap4Upgrade linux-image-2.6.32-50-ia64Upgrade linux-image-2.6.32-50-serverUpgrade linux-image-3.5.0-39-powerpc64-smpUpgrade linux-image-2.6.32-50-lpiaUpgrade linux-image-2.6.32-50-powerpc64-smpUpgrade linux-image-3.5.0-39-powerpc-smpUpgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-3.2.0-53-highbankUpgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-3.5.0-39-highbank | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub