The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-rtUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade kernel-desktop-develUpgrade preload-kmp-desktopUpgrade kernel-vmi-baseUpgrade kernel-vanilla-baseUpgrade preload-kmp-defaultUpgrade kernel-vmiUpgrade kernel-syms-rtUpgrade kernel-rt_traceUpgrade kernel-sourceUpgrade kernel-traceUpgrade brocade-bna-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-rt-develUpgrade kernel-rt_trace-baseUpgrade kernel-vmi-develUpgrade kernel-rt_trace-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-ec2-extraUpgrade kernel-desktop-baseUpgrade kernel-source-rtUpgrade kernel-debug-baseUpgrade kernel-paeUpgrade iscsitarget-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-desktopUpgrade ofed-kmp-rtUpgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade kernel-ec2-develUpgrade kernel-develUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade kernel-vanilla-develUpgrade kernel-xenUpgrade kernel-source-vanillaUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-ec2 | Feb 17, 2015 | Dec 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub