Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel审计系统audit_syscall_entry()系统权限许可和访问控制问题漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Syscall过滤技术通常基于由编号确定的syscall或具体参数来确认是否允许执行调用。在通过编号确定syscall时，64位Linux内核(x86_64)上syscall编号可能既映射到32位又映射到64位的syscall表，而这两种syscall表是不同的。由于用户空间进程是由syscall表控制的，因此可以绕过syscall编号检查，执行
CVSS Information
N/A
Vulnerability Type
N/A