kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 7, 2016 | Jan 5, 2016 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade cluster-md-kmp-default | Mar 22, 2016 | Feb 7, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-1017-raspi2Upgrade linux-image-3.13.0-74-genericUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.19.0-42-powerpc-smp | Feb 2, 2016 | Dec 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub