CVE-2010-4347
Fixed in a distro release EPSS 2%
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
Products: linux_kernel, opensuse, suse linux_enterprise_real_time_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 1 | kernel-rt | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug-debuginfo | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debug-devel | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debuginfo | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-debuginfo-common | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-devel | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-doc | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace-debuginfo | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-trace-devel | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla-debuginfo | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | kernel-rt-vanilla-devel | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | perf | 0:2.6.33.7-rt29.55.el5rt |
| Red Hat enterprise mrg 1 | perf-debuginfo | 0:2.6.33.7-rt29.55.el5rt |