kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 7, 2016 | Jan 5, 2016 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Mar 22, 2016 | Feb 7, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-4.2.0-1017-raspi2Upgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.13.0-74-powerpc64-smp | Feb 2, 2016 | Dec 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub