Total vulnerabilities in the database
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
Software | From | Fixed in |
---|---|---|
linux / linux_kernel | 2.6.36-rc2 | 2.6.36-rc2.x |
linux / linux_kernel | 2.6.36-rc1 | 2.6.36-rc1.x |
linux / linux_kernel | 2.6.36-rc3 | 2.6.36-rc3.x |
linux / linux_kernel | - | 2.6.35.4.x |
linux / linux_kernel | 2.6.36 | 2.6.36.x |
vmware / esx | 4.1 | 4.1.x |
vmware / esx | 4.0 | 4.0.x |
suse / suse_linux_enterprise_server | 11-sp1 | 11-sp1.x |
suse / suse_linux_enterprise_desktop | 11-sp1 | 11-sp1.x |