https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:26:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-01796 bdu:2015-01796 https://cve.radiocsirt.org/vuln/bdu:2015-01796 https://cve.radiocsirt.org/vuln/euvd-2026-110942 EUVD-2026-110942 https://cve.radiocsirt.org/vuln/euvd-2026-110942 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2123 <p>The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</p> <p>The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-2123 https://cve.radiocsirt.org/vuln/ghsa-875p-6x4g-fjc2 <p>The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</p> <p>The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</p> https://cve.radiocsirt.org/vuln/ghsa-875p-6x4g-fjc2 https://cve.radiocsirt.org/vuln/gsd-2012-2123 gsd-2012-2123 https://cve.radiocsirt.org/vuln/gsd-2012-2123 https://cve.radiocsirt.org/vuln/rhsa-2012:0670 <p>kernel: jbd2: unmapped buffer with _Unwritten or _Delay flags set can lead to DoS kernel: fcaps: clear the same personality flags as suid when fcaps are used</p> <p>kernel: jbd2: unmapped buffer with _Unwritten or _Delay flags set can lead to DoS kernel: fcaps: clear the same personality flags as suid when fcaps are used</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0670 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-2123 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-flo, Ubuntu:14.04:LTS: linux-goldfish, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:14.04:LTS: linux-lts-vivid, Ubuntu:14.04:LTS: linux-lts-wily, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:14.04:LTS: linux-mako, Ubuntu:14.04:LTS: linux-manta and 9 more</p> <p>The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-flo, Ubuntu:14.04:LTS: linux-goldfish, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:14.04:LTS: linux-lts-vivid, Ubuntu:14.04:LTS: linux-lts-wily, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:14.04:LTS: linux-mako, Ubuntu:14.04:LTS: linux-manta and 9 more</p> <p>The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-2123