The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-ps3Upgrade slert-releaseUpgrade kernel-s390-debugUpgrade suse-releaseUpgrade kernel-ppc64Upgrade um-host-kernelUpgrade kernel-rtUpgrade kernel-s390xUpgrade kernel-sourceUpgrade kernel-s390Upgrade kernel-smpUpgrade kernel-64k-pagesizeUpgrade kernel-rt_timingUpgrade kernel-umUpgrade kernel-iseries64Upgrade kernel-paeUpgrade kernel-s390x-debugUpgrade kernel-bigsmpUpgrade kernel-xenUpgrade kernel-defaultUpgrade um-host-install-initrdUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-kdumpUpgrade kernel-pmac64Upgrade kernel-pseries64Upgrade kernel-docsUpgrade kernel-rt_bigsmpUpgrade kernel-vanillaUpgrade kernel-xenpaeUpgrade kernel-sn2 | Feb 17, 2015 | Sep 3, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-powerpc-smp | Nov 8, 2024 | Sep 3, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Sep 3, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Sep 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub