The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Apr 12, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perf | May 30, 2019 | Apr 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | May 30, 2019 | Apr 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | May 1, 2019 | Apr 11, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 16, 2019 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Apr 12, 2019 |
| Suse | — | Upgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade gfs2-kmp-default | Jun 18, 2019 | Apr 11, 2019 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-4.4.0-150-genericUpgrade apparmor-profilesUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1110-raspi2Upgrade linux-image-4.4.0-1084-awsUpgrade linux-image-4.4.0-150-generic-lpaeUpgrade linux-image-4.4.0-150-powerpc64-embUpgrade linux-image-4.4.0-1114-snapdragonUpgrade linux-image-4.4.0-1047-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1045-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-150-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-150-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-150-lowlatencyUpgrade linux-image-virtualUpgrade python3-apparmorUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-150-powerpc64-smp | Jun 5, 2019 | Apr 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub