Privilege Escalation

2020-09-2106:23:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

JSON

linux is vulnerable to privilege escalation. The vulnerability exists as a reference count is mishandled in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c

CPENameOperatorVersion
linux-aws:bioniceq4.15.0.1007.7
linux-oem:bioniceq4.15.0.1004.2
linux-kvm:bioniceq4.15.0.1008.8
linux-aws:xenialeq4.4.0.1112.117
linux-aws:xenialeq4.4.0.1114.119
linux-aws:xenialeq4.4.0.1113.118
linux-kvm:xenialeq4.4.0.1078.76
linux-kvm:xenialeq4.4.0.1080.78
linux-kvm:xenialeq4.4.0.1079.77
kerneleq3.10.0__1062.18.1.el7

Name	Operator	Version
linux-aws:bionic	eq	4.15.0.1007.7
linux-oem:bionic	eq	4.15.0.1004.2
linux-kvm:bionic	eq	4.15.0.1008.8
linux-aws:xenial	eq	4.4.0.1112.117
linux-aws:xenial	eq	4.4.0.1114.119
linux-aws:xenial	eq	4.4.0.1113.118
linux-kvm:xenial	eq	4.4.0.1078.76
linux-kvm:xenial	eq	4.4.0.1080.78
linux-kvm:xenial	eq	4.4.0.1079.77
kernel	eq	3.10.0__1062.18.1.el7