PT-2004-3428 · Linux · Linux Kernel

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2536

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6 through 2.6.5

Description The issue arises from the exit thread function in the Linux kernel, which fails to invalidate per-TSS io bitmap pointers when a process exits without dropping IO access permissions obtained from the ioperm function. This allows other processes to access restricted memory locations and possibly gain privileges.

Recommendations For Linux kernel versions 2.6 through 2.6.5, as a temporary workaround, consider restricting access to the ioperm function to minimize the risk of exploitation. Additionally, ensure that all processes properly drop IO access permissions when exiting to prevent unauthorized access to per-TSS pointers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2536

Affected Products

Linux Kernel

References · 8

• 🔥 http://ussg.iu.edu/hypermail/linux/kernel/0405.0/1242.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2536 · Security Note
• http://secunia.com/advisories/11577 · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.6 · Note
• http://osvdb.org/5997 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16106 · Note
• http://ussg.iu.edu/hypermail/linux/kernel/0405.0/1265.html · Note
• http://securityfocus.com/bid/10302 · Note