In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs | May 23, 2023 | Feb 16, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 17, 2023 | Feb 16, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Feb 16, 2022 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 16, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 17, 2023 | Feb 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub