Privilege Escalation

2019-01-1509:24:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

26.9%

JSON

Linux kernel is vulnerable to privilege escalation. The VMX code sets the GDT.LIMIT to 64 KB and does not restore it to the previous host value. This allows an attacker is able to escalate their privileges by placing malicious entries to the per-cpu variables in the GDT with a corrupted GDT limit.

CPENameOperatorVersion
kerneleq2.6.32__696.1.1.bgq.el6
kerneleq2.6.32__696.28.1.el6
kerneleq2.6.32__358.6.1.el6
kerneleq2.6.32__642.6.2.el6
kerneleq2.6.32__431.40.2.el6
kerneleq2.6.32__131.17.1.el6
kerneleq2.6.32__642.3.1.el6
kerneleq2.6.32__71.18.2.el6
kerneleq2.6.32__358.14.1.el6
kerneleq2.6.32__279.19.1.el6

Name	Operator	Version
kernel	eq	2.6.32__696.1.1.bgq.el6
kernel	eq	2.6.32__696.28.1.el6
kernel	eq	2.6.32__358.6.1.el6
kernel	eq	2.6.32__642.6.2.el6
kernel	eq	2.6.32__431.40.2.el6
kernel	eq	2.6.32__131.17.1.el6
kernel	eq	2.6.32__642.3.1.el6
kernel	eq	2.6.32__71.18.2.el6
kernel	eq	2.6.32__358.14.1.el6
kernel	eq	2.6.32__279.19.1.el6