| Package | Affected versions | Patched versions |
|---|---|---|
| grsecurity kernel patch | = 2.4.33= 2.4.33.2= 2.4.33.3= 2.4.33.4= 2.4.34= 2.6.18= 2.6.24.4 |
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free