Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-debugUpgrade um-host-install-initrdUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-sn2Upgrade um-host-kernelUpgrade kernel-bigsmpUpgrade kernel-smpUpgrade kernel-64k-pagesizeUpgrade kernel-defaultUpgrade kernel-pseries64Upgrade kernel-s390x | Feb 17, 2015 | Apr 14, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-4-power4Upgrade linux-image-2.6.8.1-4-power3-smpUpgrade linux-image-2.6.8.1-4-386Upgrade linux-image-2.6.8.1-4-amd64-k8-smpUpgrade linux-patch-debian-2.6.8.1Upgrade linux-image-2.6.8.1-4-power3Upgrade linux-image-2.6.8.1-4-k7Upgrade linux-image-2.6.8.1-4-amd64-k8 | Nov 8, 2024 | Apr 14, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub