It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 11, 2018 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 28, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-tools | Aug 28, 2019 | Jul 11, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2017 | Apr 18, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 3, 2017 | Apr 28, 2017 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-default | May 19, 2017 | Apr 28, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-4.10.0-22-genericUpgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-79-genericUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-4.4.0-1018-awsUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenial | Jun 8, 2017 | Apr 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub