Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 27, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 29, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 27, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 20, 2015 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extra | Dec 18, 2015 | May 27, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-52-powerpc64-embUpgrade linux-image-3.2.0-83-virtualUpgrade linux-image-3.16.0-37-powerpc-e500mcUpgrade linux-image-2.6.32-74-genericUpgrade linux-image-2.6.32-74-sparc64-smpUpgrade linux-image-3.2.0-83-powerpc-smpUpgrade linux-image-3.2.0-83-highbankUpgrade linux-image-3.2.0-83-genericUpgrade linux-image-3.13.0-52-powerpc-e500Upgrade linux-image-2.6.32-74-generic-paeUpgrade linux-image-2.6.32-74-versatileUpgrade linux-image-2.6.32-74-lpiaUpgrade linux-image-3.13.0-52-genericUpgrade linux-image-3.19.0-16-genericUpgrade linux-image-3.19.0-16-powerpc64-smpUpgrade linux-image-3.16.0-37-lowlatencyUpgrade linux-image-3.13.0-52-powerpc-smpUpgrade linux-image-2.6.32-74-powerpcUpgrade linux-image-3.19.0-16-powerpc-smpUpgrade linux-image-2.6.32-74-serverUpgrade linux-image-3.16.0-37-powerpc-smpUpgrade linux-image-3.16.0-37-generic-lpaeUpgrade linux-image-3.13.0-52-powerpc-e500mcUpgrade linux-image-3.19.0-16-lowlatencyUpgrade linux-image-2.6.32-377-ec2Upgrade linux-image-3.16.0-37-powerpc64-embUpgrade linux-image-3.19.0-16-generic-lpaeUpgrade linux-image-3.19.0-16-powerpc64-embUpgrade linux-image-3.16.0-37-powerpc64-smpUpgrade linux-image-2.6.32-74-sparc64Upgrade linux-image-3.13.0-52-generic-lpaeUpgrade linux-image-3.2.0-83-generic-paeUpgrade linux-image-2.6.32-74-386Upgrade linux-image-3.2.0-83-omapUpgrade linux-image-2.6.32-74-ia64Upgrade linux-image-3.19.0-16-powerpc-e500mcUpgrade linux-image-2.6.32-74-virtualUpgrade linux-image-2.6.32-74-powerpc64-smpUpgrade linux-image-3.13.0-52-powerpc64-smpUpgrade linux-image-2.6.32-74-powerpc-smpUpgrade linux-image-2.6.32-74-preemptUpgrade linux-image-3.2.0-1464-omap4Upgrade linux-image-3.2.0-83-powerpc64-smpUpgrade linux-image-3.16.0-37-genericUpgrade linux-image-3.13.0-52-lowlatency | Nov 8, 2024 | May 27, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub