The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Jan 27, 2012 |
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python-perf | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2012 |
| Suse | — | Upgrade kernel-desktop-debugsourceUpgrade kernel-default-develUpgrade kernel-debug-debuginfoUpgrade kernel-defaultUpgrade kernel-pae-devel-debuginfoUpgrade kernel-default-baseUpgrade kernel-trace-base-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-default-devel-debuginfoUpgrade kernel-desktop-baseUpgrade kernel-vanilla-debuginfoUpgrade kernel-pae-base-debuginfoUpgrade kernel-xenUpgrade kernel-debug-base-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-desktop-base-debuginfoUpgrade kernel-pae-debuginfoUpgrade kernel-vanilla-develUpgrade kernel-ec2Upgrade kernel-trace-develUpgrade kernel-debug-debugsourceUpgrade kernel-source-vanillaUpgrade kernel-pae-baseUpgrade kernel-trace-debugsourceUpgrade kernel-default-base-debuginfoUpgrade kernel-ec2-debuginfoUpgrade kernel-debug-develUpgrade kernel-pae-debugsourceUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-develUpgrade kernel-xen-debugsourceUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-debug-baseUpgrade kernel-xen-debuginfoUpgrade kernel-vanilla-baseUpgrade kernel-desktop-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade kernel-trace-baseUpgrade kernel-default-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade kernel-desktop-develUpgrade kernel-xen-base-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-ec2-debugsourceUpgrade kernel-sourceUpgrade kernel-ec2-extraUpgrade kernel-vanillaUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-trace-debuginfoUpgrade kernel-ec2-base-debuginfoUpgrade kernel-ec2-devel-debuginfo | Dec 12, 2013 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-3.0.0-15-omapUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-3.0.0-1207-omap4Upgrade linux-image-3.0.0-15-serverUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-3.0.0-15-virtualUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-3.0.0-15-powerpc-smp | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub