Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing a crafted microcode header and leveraging root privileges for write access to the initrd.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-doc | Dec 1, 2016 | May 27, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 27, 2015 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 27, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-ec2-devel | Dec 18, 2015 | May 27, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-51-powerpc-smpUpgrade linux-image-3.16.0-36-powerpc-e500mcUpgrade linux-image-3.13.0-51-powerpc64-smpUpgrade linux-image-3.16.0-36-lowlatencyUpgrade linux-image-3.13.0-51-lowlatencyUpgrade linux-image-3.13.0-51-powerpc64-embUpgrade linux-image-3.16.0-36-generic-lpaeUpgrade linux-image-3.16.0-36-powerpc-smpUpgrade linux-image-3.13.0-51-genericUpgrade linux-image-3.16.0-36-powerpc64-embUpgrade linux-image-3.16.0-36-powerpc64-smpUpgrade linux-image-3.13.0-51-powerpc-e500mcUpgrade linux-image-3.13.0-51-generic-lpaeUpgrade linux-image-3.16.0-36-genericUpgrade linux-image-3.13.0-51-powerpc-e500 | Nov 8, 2024 | May 27, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub