Information Disclosure

2020-04-1000:40:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

10.1%

JSON

The kernel-rt is vulnerable to Information Disclosure. Kees Cook and Steve Beattie discovered a race condition in the /proc code in the Linux kernel. This could lead to information in the “/proc/[pid]/maps” and “/proc/[pid]/smaps” files being leaked to users (who would otherwise not have access to this information) during ELF loading. This could help a local attacker bypass the ASLR security feature.

CPENameOperatorVersion
kernel-rteq2.6.24.7__111.el5rt
kernel-rteq2.6.24.7__81.el5rt
kernel-rteq2.6.24.7__117.el5rt
kernel-rteq2.6.24.7__132.el5rt
kernel-rteq2.6.24.7__101.el5rt
kernel-rteq2.6.24.7__108.el5rt
kernel-rteq2.6.24.7__93.el5rt
kernel-rteq2.6.24.7__126.el5rt
kernel-rteq2.6.24.7__74.el5rt
kernel-rteq2.6.24.7__111.el5rt

Name	Operator	Version
kernel-rt	eq	2.6.24.7__111.el5rt
kernel-rt	eq	2.6.24.7__81.el5rt
kernel-rt	eq	2.6.24.7__117.el5rt
kernel-rt	eq	2.6.24.7__132.el5rt
kernel-rt	eq	2.6.24.7__101.el5rt
kernel-rt	eq	2.6.24.7__108.el5rt
kernel-rt	eq	2.6.24.7__93.el5rt
kernel-rt	eq	2.6.24.7__126.el5rt
kernel-rt	eq	2.6.24.7__74.el5rt
kernel-rt	eq	2.6.24.7__111.el5rt