Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:14593
HistoryMay 02, 2019 - 4:54 a.m.

Privilege Escalation

2019-05-0204:54:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

kernel-rt is vulnerable to privilege escalation. A race condition was found in the way the Linux kernel’s ptrace implementation handled PTRACE_SETREGS requests when the debuggee was woken due to a SIGKILL signal instead of being stopped. A local, unprivileged user could use this flaw to escalate their privileges.

References

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C