Description
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
References
- linux-security-module-gain-privileges(18673) vdb-entry
- 20041223 Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation mailing-list
- CLA-2005:930 vendor-advisory
- 12093 vdb-entry