The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 02:05
Type | Values Removed | Values Added |
---|---|---|
Summary | The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression. |
13 Feb 2023, 04:23
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x86_64 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-bounds access to the system call table using the %rax register. NOTE: this vulnerability exists because of a CVE-2007-4573 regression. |
02 Feb 2023, 17:17
Type | Values Removed | Values Added |
---|---|---|
Summary | CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability | |
References |
|
|
Information
Published : 2010-09-22 19:00
Updated : 2023-12-10 11:03
NVD link : CVE-2010-3301
Mitre link : CVE-2010-3301
CVE.ORG link : CVE-2010-3301
JSON object : View
Products Affected
canonical
- ubuntu_linux
linux
- linux_kernel
suse
- linux_enterprise_real_time_extension
CWE
CWE-269
Improper Privilege Management