In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-cross-headers | May 23, 2023 | Feb 16, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 17, 2023 | Feb 16, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Feb 16, 2022 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 16, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 17, 2023 | Feb 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub