Title: Linux Kernel 'devtmpfs' Insecure Root Directory Permission Vulnerability

Severity: HIGH

Description:

The 'devtmpfs' program is a kernel component that is used to create the device filesystem when the system boots.

The Linux kernel is prone to a vulnerability that lets attackers create files as the superuser. This issue occurs because the root directory of 'devtmpfs' is incorrectly set at mode 1777 instead of 0755.

A local attacker can exploit this issue to execute arbitrary code with superuser privileges.

Affected Products:

Debian Linux 4.0
Debian Linux 4.0 alpha
Debian Linux 4.0 amd64
Debian Linux 4.0 arm
Debian Linux 4.0 hppa
Debian Linux 4.0 ia-32
Debian Linux 4.0 ia-64
Debian Linux 4.0 m68k
Debian Linux 4.0 mips
Debian Linux 4.0 mipsel
Debian Linux 4.0 powerpc
Debian Linux 4.0 s/390
Debian Linux 4.0 sparc
Linux kernel 2.6.0
Linux kernel 2.6.0 -test1
Linux kernel 2.6.0 -test10
Linux kernel 2.6.0 -test11
Linux kernel 2.6.0 -test2
Linux kernel 2.6.0 -test3
Linux kernel 2.6.0 -test4
Linux kernel 2.6.0 -test5
Linux kernel 2.6.0 -test6
Linux kernel 2.6.0 -test7
Linux kernel 2.6.0 -test8
Linux kernel 2.6.0 -test9
Linux kernel 2.6.0 -test9-CVS
Linux kernel 2.6.0 .10
Linux kernel 2.6.1
Linux kernel 2.6.1 -rc1
Linux kernel 2.6.1 -rc2
Linux kernel 2.6.10
Linux kernel 2.6.10
Linux kernel 2.6.10 rc2
Linux kernel 2.6.11
Linux kernel 2.6.11
Linux kernel 2.6.11 -rc2
Linux kernel 2.6.11 -rc3
Linux kernel 2.6.11 -rc4
Linux kernel 2.6.11 .11
Linux kernel 2.6.11 .12
Linux kernel 2.6.11 .4
Linux kernel 2.6.11 .5
Linux kernel 2.6.11 .6
Linux kernel 2.6.11 .7
Linux kernel 2.6.11 .8
Linux kernel 2.6.11.4
Linux kernel 2.6.12
Linux kernel 2.6.12
Linux kernel 2.6.12 -rc1
Linux kernel 2.6.12 -rc4
Linux kernel 2.6.12 -rc5
Linux kernel 2.6.12 .1
Linux kernel 2.6.12 .12
Linux kernel 2.6.12 .2
Linux kernel 2.6.12 .22
Linux kernel 2.6.12 .3
Linux kernel 2.6.12 .4
Linux kernel 2.6.12 .5
Linux kernel 2.6.12 .6
Linux kernel 2.6.13
Linux kernel 2.6.13
Linux kernel 2.6.13 -rc1
Linux kernel 2.6.13 -rc4
Linux kernel 2.6.13 -rc6
Linux kernel 2.6.13 -rc7
Linux kernel 2.6.13 .1
Linux kernel 2.6.13 .2
Linux kernel 2.6.13 .3
Linux kernel 2.6.13 .4
Linux kernel 2.6.14
Linux kernel 2.6.14
Linux kernel 2.6.14 -rc1
Linux kernel 2.6.14 -rc2
Linux kernel 2.6.14 -rc3
Linux kernel 2.6.14 -rc4
Linux kernel 2.6.14 .1
Linux kernel 2.6.14 .2
Linux kernel 2.6.14 .3
Linux kernel 2.6.14.4
Linux kernel 2.6.14.5
Linux kernel 2.6.15
Linux kernel 2.6.15
Linux kernel 2.6.15 -rc1
Linux kernel 2.6.15 -rc2
Linux kernel 2.6.15 -rc3
Linux kernel 2.6.15 -rc4
Linux kernel 2.6.15 -rc5
Linux kernel 2.6.15 -rc6
Linux kernel 2.6.15 .4
Linux kernel 2.6.15-27.48
Linux kernel 2.6.15.1
Linux kernel 2.6.15.11
Linux kernel 2.6.15.2
Linux kernel 2.6.15.3
Linux kernel 2.6.15.5
Linux kernel 2.6.15.6
Linux kernel 2.6.16
Linux kernel 2.6.16
Linux kernel 2.6.16 -rc1
Linux kernel 2.6.16 .1
Linux kernel 2.6.16 .11
Linux kernel 2.6.16 .12
Linux kernel 2.6.16 .19
Linux kernel 2.6.16 .23
Linux kernel 2.6.16 .7
Linux kernel 2.6.16 .9
Linux kernel 2.6.16 13
Linux kernel 2.6.16 27
Linux kernel 2.6.16.16
Linux kernel 2.6.16.17
Linux kernel 2.6.16.18
Linux kernel 2.6.16.2
Linux kernel 2.6.16.21
Linux kernel 2.6.16.3
Linux kernel 2.6.16.4
Linux kernel 2.6.16.5
Linux kernel 2.6.16.8
Linux kernel 2.6.17
Linux kernel 2.6.17
Linux kernel 2.6.17
Linux kernel 2.6.17
Linux kernel 2.6.17 -rc5
Linux kernel 2.6.17 .8
Linux kernel 2.6.17.1
Linux kernel 2.6.17.10
Linux kernel 2.6.17.11
Linux kernel 2.6.17.12
Linux kernel 2.6.17.13
Linux kernel 2.6.17.14
Linux kernel 2.6.17.2
Linux kernel 2.6.17.3
Linux kernel 2.6.17.4
Linux kernel 2.6.17.5
Linux kernel 2.6.17.6
Linux kernel 2.6.17.7
Linux kernel 2.6.17.9
Linux kernel 2.6.18
Linux kernel 2.6.18
Linux kernel 2.6.18 .1
Linux kernel 2.6.18-53
Linux kernel 2.6.18-8.1.8.el5
Linux kernel 2.6.18.3
Linux kernel 2.6.18.4
Linux kernel 2.6.19
Linux kernel 2.6.19 -rc1
Linux kernel 2.6.19 -rc2
Linux kernel 2.6.19 -rc3
Linux kernel 2.6.19 -rc4
Linux kernel 2.6.19 -rc6
Linux kernel 2.6.19.1
Linux kernel 2.6.19.1
Linux kernel 2.6.19.2
Linux kernel 2.6.2
Linux kernel 2.6.20
Linux kernel 2.6.20
Linux kernel 2.6.20 -git5
Linux kernel 2.6.20-2
Linux kernel 2.6.20-rc2
Linux kernel 2.6.20.1
Linux kernel 2.6.20.11
Linux kernel 2.6.20.13
Linux kernel 2.6.20.15
Linux kernel 2.6.20.2
Linux kernel 2.6.20.3
Linux kernel 2.6.20.4
Linux kernel 2.6.20.5
Linux kernel 2.6.20.8
Linux kernel 2.6.20.9
Linux kernel 2.6.21
Linux kernel 2.6.21 .1
Linux kernel 2.6.21 4
Linux kernel 2.6.21-RC3
Linux kernel 2.6.21-RC3
Linux kernel 2.6.21-RC4
Linux kernel 2.6.21-RC5
Linux kernel 2.6.21-RC6
Linux kernel 2.6.21-git8
Linux kernel 2.6.21.2
Linux kernel 2.6.21.3
Linux kernel 2.6.21.6
Linux kernel 2.6.21.7
Linux kernel 2.6.22
Linux kernel 2.6.22-rc1
Linux kernel 2.6.22-rc7
Linux kernel 2.6.22.1
Linux kernel 2.6.22.11
Linux kernel 2.6.22.12
Linux kernel 2.6.22.13
Linux kernel 2.6.22.14
Linux kernel 2.6.22.15
Linux kernel 2.6.22.16
Linux kernel 2.6.22.17
Linux kernel 2.6.22.2
Linux kernel 2.6.22.3
Linux kernel 2.6.22.4
Linux kernel 2.6.22.5
Linux kernel 2.6.22.6
Linux kernel 2.6.22.7
Linux kernel 2.6.22.8
Linux kernel 2.6.23
Linux kernel 2.6.23-rc1
Linux kernel 2.6.23-rc2
Linux kernel 2.6.23.09
Linux kernel 2.6.23.1
Linux kernel 2.6.23.10
Linux kernel 2.6.23.14
Linux kernel 2.6.23.2
Linux kernel 2.6.23.3
Linux kernel 2.6.23.4
Linux kernel 2.6.23.5
Linux kernel 2.6.23.6
Linux kernel 2.6.23.7
Linux kernel 2.6.24
Linux kernel 2.6.24-git13
Linux kernel 2.6.24-rc1
Linux kernel 2.6.24-rc2
Linux kernel 2.6.24-rc3
Linux kernel 2.6.24-rc4
Linux kernel 2.6.24-rc5
Linux kernel 2.6.24.1
Linux kernel 2.6.24.2
Linux kernel 2.6.24.6
Linux kernel 2.6.25
Linux kernel 2.6.25
Linux kernel 2.6.25 .15
Linux kernel 2.6.25 19
Linux kernel 2.6.25-rc1
Linux kernel 2.6.25.1
Linux kernel 2.6.25.10
Linux kernel 2.6.25.11
Linux kernel 2.6.25.12
Linux kernel 2.6.25.13
Linux kernel 2.6.25.2
Linux kernel 2.6.25.3
Linux kernel 2.6.25.4
Linux kernel 2.6.25.5
Linux kernel 2.6.25.6
Linux kernel 2.6.25.7
Linux kernel 2.6.25.8
Linux kernel 2.6.25.9
Linux kernel 2.6.26
Linux kernel 2.6.26 -rc6
Linux kernel 2.6.26 .5
Linux kernel 2.6.26 7
Linux kernel 2.6.26-rc5-git1
Linux kernel 2.6.26.1
Linux kernel 2.6.26.3
Linux kernel 2.6.26.4
Linux kernel 2.6.26.6
Linux kernel 2.6.27
Linux kernel 2.6.27 -rc6-git6
Linux kernel 2.6.27 -rc8
Linux kernel 2.6.27 -rc8-git5
Linux kernel 2.6.27 .5
Linux kernel 2.6.27 12
Linux kernel 2.6.27 3
Linux kernel 2.6.27 6
Linux kernel 2.6.27-git3
Linux kernel 2.6.27-rc1
Linux kernel 2.6.27-rc2
Linux kernel 2.6.27-rc4
Linux kernel 2.6.27-rc5
Linux kernel 2.6.27-rc6
Linux kernel 2.6.27.12
Linux kernel 2.6.27.13
Linux kernel 2.6.27.14
Linux kernel 2.6.27.24
Linux kernel 2.6.27.8
Linux kernel 2.6.28
Linux kernel 2.6.28 -git7
Linux kernel 2.6.28 -rc1
Linux kernel 2.6.28 -rc5
Linux kernel 2.6.28 -rc7
Linux kernel 2.6.28.1
Linux kernel 2.6.28.10
Linux kernel 2.6.28.2
Linux kernel 2.6.28.3
Linux kernel 2.6.28.4
Linux kernel 2.6.28.5
Linux kernel 2.6.28.6
Linux kernel 2.6.28.8
Linux kernel 2.6.28.9
Linux kernel 2.6.29
Linux kernel 2.6.29-git1
Linux kernel 2.6.29-git14
Linux kernel 2.6.29-git8
Linux kernel 2.6.29-rc1
Linux kernel 2.6.29-rc2
Linux kernel 2.6.29-rc2-git1
Linux kernel 2.6.29.1
Linux kernel 2.6.29.4
Linux kernel 2.6.3
Linux kernel 2.6.30
Linux kernel 2.6.30 -rc1
Linux kernel 2.6.30-rc2
Linux kernel 2.6.30-rc3
Linux kernel 2.6.30-rc5
Linux kernel 2.6.30-rc6
Linux kernel 2.6.30.1
Linux kernel 2.6.30.10
Linux kernel 2.6.30.3
Linux kernel 2.6.30.4
Linux kernel 2.6.30.5
Linux kernel 2.6.31
Linux kernel 2.6.31-git11
Linux kernel 2.6.31-rc1
Linux kernel 2.6.31-rc2
Linux kernel 2.6.31-rc3
Linux kernel 2.6.31-rc4
Linux kernel 2.6.31-rc5-git3
Linux kernel 2.6.31-rc6
Linux kernel 2.6.31-rc7
Linux kernel 2.6.31-rc7
Linux kernel 2.6.31-rc8
Linux kernel 2.6.31-rc9
Linux kernel 2.6.31.1
Linux kernel 2.6.31.11
Linux kernel 2.6.31.2
Linux kernel 2.6.31.2
Linux kernel 2.6.31.4
Linux kernel 2.6.31.5
Linux kernel 2.6.31.6
Linux kernel 2.6.32
Linux kernel 2.6.32-rc1
Linux kernel 2.6.32-rc2
Linux kernel 2.6.32-rc3
Linux kernel 2.6.32-rc4
Linux kernel 2.6.32-rc5
Linux kernel 2.6.32-rc7
Linux kernel 2.6.32-rc8
Linux kernel 2.6.32.3
Linux kernel 2.6.32.4
Linux kernel 2.6.4
Linux kernel 2.6.5
Linux kernel 2.6.6
Linux kernel 2.6.6 rc1
Linux kernel 2.6.7
Linux kernel 2.6.7 rc1
Linux kernel 2.6.8
Linux kernel 2.6.8 rc1
Linux kernel 2.6.8 rc2
Linux kernel 2.6.8 rc3
Linux kernel 2.6.8.1
Linux kernel 2.6.9
MandrakeSoft Linux Mandrake 2010.0
MandrakeSoft Linux Mandrake 2010.0 x86_64
RedHat Fedora Core2
RedHat Fedora Core3
RedHat Fedora Core4
S.u.S.E. Linux Enterprise Server 9
S.u.S.E. Linux Personal 9.1.0
S.u.S.E. Linux Personal 9.1.0 x86_64
S.u.S.E. Linux Personal 9.2.0
S.u.S.E. Linux Personal 9.2.0 x86_64
S.u.S.E. openSUSE 11.2
Trustix Secure Enterprise Linux 2.0.0
Trustix Secure Linux 2.0.0
Trustix Secure Linux 2.1.0
Trustix Secure Linux 2.2.0
Trustix Secure Linux 3.0.0
Ubuntu Ubuntu Linux 4.1.0 ia32
Ubuntu Ubuntu Linux 4.1.0 ia64
Ubuntu Ubuntu Linux 4.1.0 ppc
Ubuntu Ubuntu Linux 5.0.0 4 amd64
Ubuntu Ubuntu Linux 5.0.0 4 i386
Ubuntu Ubuntu Linux 5.0.0 4 powerpc

References:

kernel.org: ChangeLog-2.6.32.7
kernel.org: Linux kernel Homepage

Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.

J-Security Center

Title: Linux Kernel 'devtmpfs' Insecure Root Directory Permission Vulnerability

Severity: HIGH

Description:

Affected Products:

References: