Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200403-02 High: Kernel Privilege Escalation Threat

gentoo
Calendar Grey March 6, 2004
Scroller Gentoo
Immediate action needed for Gentoo Linux because of a severe kernel vulnerability that poses risks of privilege elevation.
A critical security vulnerability has been found in recent Linux kernels by Paul Starzetz of iSEC Security Research which allows for local privilege escalations

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200403-02
~                                            https://security.gentoo.org/

~  Severity: High
~     Title: Linux kernel do_mremap local privilege escalation
~            vulnerability
~      Date: March 06, 2004
~      Bugs: #42024
~        ID: 200403-02


Synopsis
=======
A critical security vulnerability has been found in recent Linux
kernels by Paul Starzetz of iSEC Security Research which allows for
local privilege escalations.

Background
=========
The Linux kernel is responsible for memory management in a working
system - to allow this, processes are allowed to allocate and
unallocate memory.

Affected packages
================
~   -------------------------------------------------------------------
~          Kernel      /   Unaffected Version   /    Manual Update?
~   -------------------------------------------------------------------

~   aa-sources................2...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory critical issue Gentoo privilege escalation kernel issue

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory critical issue Gentoo privilege escalation kernel issue

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround