Intrusion PreventionLinux.Kernel.keyrings.facility.Local.Privilege.Escalation
Description
This indicates an attack attempt to exploit a Privilege Escalation vulnerability in Linux Kernel.
The vulnerability is due to an error when the vulnerable system handles reference in the keyrings facility. An attacker can exploit this to elevate their privileges on vulnerable systems.
Affected Products
Linux Kernel version 3.8 and higher
Impact
Privilege Escalation: Remote attackers can leverage their privilege on the vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-07 | 14.628 | Severity:critical:high |
| ID | 41996 |
| Created | Jan 28, 2016 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2016-0728 |
| Exploit Prediction Score | 0.04% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD, Solaris |
| Affected App | Other |