SB2023051671 - Privilege escalation in Linux kernel
Published: May 16, 2023 Updated: June 14, 2023
Security Bulletin ID
SB2023051671
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper Control of Dynamically-Managed Code Resources (CVE-ID: CVE-2022-25265)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to an error in Linux kernel due to certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
Remediation
Install update from vendor's website.