The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Jan 27, 2012 |
| Centos_linux | — | Upgrade kernel-docUpgrade perfUpgrade kernel-firmwareUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debug | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2012 |
| Suse | — | Upgrade kernel-default-devel-debuginfoUpgrade kernel-desktop-debugsourceUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-source-vanillaUpgrade kernel-xen-devel-debuginfoUpgrade kernel-desktop-baseUpgrade kernel-default-base-debuginfoUpgrade kernel-vanilla-debuginfoUpgrade kernel-pae-base-debuginfoUpgrade kernel-debug-develUpgrade kernel-pae-debugsourceUpgrade kernel-desktop-base-debuginfoUpgrade kernel-default-baseUpgrade kernel-ec2-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-vanilla-develUpgrade kernel-pae-debuginfoUpgrade kernel-trace-debugsourceUpgrade kernel-pae-devel-debuginfoUpgrade kernel-pae-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-debug-debugsourceUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-vanilla-base-debuginfoUpgrade kernel-debug-base-debuginfoUpgrade kernel-trace-base-debuginfoUpgrade kernel-trace-devel-debuginfoUpgrade kernel-default-debugsourceUpgrade kernel-vanilla-debugsourceUpgrade kernel-ec2-extra-debuginfoUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade kernel-traceUpgrade kernel-xen-base-debuginfoUpgrade kernel-desktopUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-xen-debugsourceUpgrade kernel-trace-debuginfoUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-ec2-debugsourceUpgrade kernel-xen-develUpgrade kernel-default-debuginfoUpgrade kernel-desktop-develUpgrade kernel-ec2-base-debuginfoUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-debug-devel-debuginfoUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-xen-debuginfoUpgrade kernel-ec2-extraUpgrade kernel-ec2-baseUpgrade kernel-develUpgrade kernel-desktop-debuginfo | Dec 12, 2013 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-3.0.0-1207-omap4Upgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-3.0.0-15-virtual | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub