Linux Vulnerabilities Could Lead to Attackers Gaining Root Privileges

Three flaws have been found in the Linux kernel within the iSCSI module. This module is used for accessing shared data storage facilities and could allow root privileges for an attacker with a user account. These flaws have existed in Linux code since 2006 and have only recently been discovered.

The three vulnerabilities can allow a hacker with basic user privileges to bypass exploit-blocking security features which can lead to: elevation of privileges, leaking information and denials of service. However, the vulnerable module isn’t as prevalent as it once was and therefore isn’t loaded by default. Furthermore, the flaw is in a section of code that is not remotely accessible so an attacker would need physical access to be able to exploit it.