The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-default | Dec 18, 2015 | Feb 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.11.0-15-generic | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub