CVE-2008-1940

Published: Apr 25, 2008Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.

Affected (7)

Products: Grsecurity: Grsecurity Kernel Patch

Grsecurity

1 product

Grsecurity Kernel Patch

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Grsecurity Grsecurity Kernel Patch	Version 2.4.33.2
Grsecurity Grsecurity Kernel Patch	Version 2.4.33.3
Grsecurity Grsecurity Kernel Patch	Version 2.4.33.4
Grsecurity Grsecurity Kernel Patch	Version 2.4.33
Grsecurity Grsecurity Kernel Patch	Version 2.4.34
Grsecurity Grsecurity Kernel Patch	Version 2.6.18
Grsecurity Grsecurity Kernel Patch	Version 2.6.24.4