In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules | May 23, 2023 | Feb 16, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 17, 2023 | Feb 16, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Feb 16, 2022 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 16, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 17, 2023 | Feb 16, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub