The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-s390x-debugUpgrade um-host-install-initrdUpgrade kernel-pseries64Upgrade kernel-iseries64Upgrade kernel-bigsmpUpgrade kernel-sn2Upgrade kernel-paeUpgrade kernel-defaultUpgrade kernel-rt_bigsmpUpgrade kernel-rt_debugUpgrade kernel-vanillaUpgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-docsUpgrade kernel-xenUpgrade kernel-xenpaeUpgrade kernel-rt_timingUpgrade slert-releaseUpgrade kernel-smpUpgrade kernel-s390-debugUpgrade kernel-s390Upgrade um-host-kernelUpgrade kernel-sourceUpgrade suse-releaseUpgrade kernel-ppc64Upgrade kernel-rtUpgrade kernel-ps3Upgrade kernel-s390xUpgrade kernel-64k-pagesize | Feb 17, 2015 | Sep 3, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-cell | Nov 8, 2024 | Sep 3, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Sep 3, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Sep 3, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub