The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-sn2Upgrade kernel-xenUpgrade kernel-paeUpgrade kernel-bigsmpUpgrade kernel-rt_bigsmpUpgrade kernel-pseries64Upgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-symsUpgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-s390x-debugUpgrade kernel-umUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-rt_timingUpgrade kernel-pmac64Upgrade kernel-vanillaUpgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-s390xUpgrade slert-releaseUpgrade kernel-ppc64Upgrade kernel-64k-pagesizeUpgrade kernel-rtUpgrade kernel-ps3Upgrade um-host-kernelUpgrade suse-releaseUpgrade kernel-s390Upgrade kernel-s390-debug | Feb 17, 2015 | Sep 3, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.24-21-hppa64Upgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.22-15-lpiacompat | Nov 8, 2024 | Sep 3, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Sep 3, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Sep 3, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub