fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-hugememUpgrade kernelUpgrade kernel-hugemem-develUpgrade kernel-xen-develUpgrade kernel-smpUpgrade kernel-debugUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-devel | Dec 1, 2016 | Sep 29, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 29, 2008 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-sourceUpgrade um-host-kernelUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-s390-debugUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-s390x-debugUpgrade um-host-install-initrdUpgrade suse-releaseUpgrade kernel-smpUpgrade kernel-ppc64Upgrade kernel-sn2Upgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-um | Feb 17, 2015 | Sep 29, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.24-22-virtual | Nov 8, 2024 | Sep 29, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Sep 29, 2008 |
| Vmsa 2009 0015 | — | Apply ESX350-200910401-SG. | Feb 16, 2011 | Sep 29, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub