The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 31, 2017 | May 2, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Dec 4, 2019 | May 2, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Dec 18, 2019 | May 2, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools | Dec 27, 2019 | May 2, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel-uek-firmwareUpgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-debug | Nov 2, 2022 | May 2, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2014 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-default | Dec 9, 2016 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-208-powerpc-e500mcUpgrade linux-image-4.4.0-1091-kvmUpgrade linux-image-4.4.0-208-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-208-lowlatencyUpgrade linux-image-4.4.0-208-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-1150-raspi2Upgrade linux-image-4.10.0-27-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-208-genericUpgrade linux-image-4.4.0-1126-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1154-snapdragonUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-208-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1090-awsUpgrade linux-image-4.4.0-208-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws | Jul 21, 2017 | May 2, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub