The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Dec 18, 2015 | Feb 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.11.0-15-generic | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub