The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernelUpgrade kernel-firmwareUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-PAEUpgrade python-perf | Dec 1, 2016 | May 11, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 11, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 11, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | May 11, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-60-serverUpgrade linux-image-2.6.32-60-386Upgrade linux-image-2.6.32-60-powerpc64-smpUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-2.6.32-60-preemptUpgrade linux-image-2.6.32-60-sparc64Upgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-2.6.32-60-powerpcUpgrade linux-image-2.6.32-60-generic-paeUpgrade linux-image-2.6.32-364-ec2Upgrade linux-image-3.13.0-27-powerpc-e500mcUpgrade linux-image-2.6.32-60-lpiaUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-2.6.32-60-sparc64-smpUpgrade linux-image-3.13.0-27-powerpc64-smpUpgrade linux-image-3.13.0-27-generic-lpaeUpgrade linux-image-2.6.32-60-versatileUpgrade linux-image-2.6.32-60-genericUpgrade linux-image-3.13.0-27-powerpc64-embUpgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.13.0-27-lowlatencyUpgrade linux-image-2.6.32-60-ia64Upgrade linux-image-3.13.0-27-powerpc-smpUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.13.0-27-powerpc-e500Upgrade linux-image-3.13.0-30-genericUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-2.6.32-60-powerpc-smpUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-2.6.32-60-virtualUpgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.13.0-27-generic | Nov 8, 2024 | May 11, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub