The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 6, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Feb 6, 2014 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Dec 18, 2015 | Feb 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.11.0-15-generic-lpae | Nov 8, 2024 | Feb 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub