The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTL_BCM_GET_DEVICE_DRIVER_INFO ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2013 |
| Suse | — | Upgrade kernel-desktopUpgrade kernel-docsUpgrade xen-kmp-defaultUpgrade kernel-bigsmpUpgrade ocfs2-kmp-rt_traceUpgrade sle-hae-releaseUpgrade kernel-paeUpgrade gfs2-kmp-xenUpgrade kernel-trace-baseUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-trace-extraUpgrade kernel-ec2Upgrade iscsitarget-kmp-rtUpgrade kernel-defaultUpgrade kernel-xenUpgrade cluster-network-kmp-xenUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade cluster-network-kmp-defaultUpgrade cluster-network-kmp-rtUpgrade ocfs2-kmp-xenUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-pae-develUpgrade cluster-network-kmp-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-default-baseUpgrade cluster-network-kmp-ppc64Upgrade kernel-rt-develUpgrade kernel-xen-extraUpgrade cluster-network-kmp-paeUpgrade xen-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-xen-develUpgrade iscsitarget-kmp-rt_traceUpgrade ofed-kmp-rt_traceUpgrade drbd-kmp-rt_traceUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade cluster-network-kmp-bigsmpUpgrade kernel-trace-develUpgrade kernel-ppc64Upgrade lttng-modules-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-ppc64-develUpgrade kernel-rt_trace-develUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-rt_trace-baseUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-desktop-develUpgrade kernel-ec2-baseUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-ppc64Upgrade kernel-bigsmp-develUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-bigsmpUpgrade kernel-source-rtUpgrade cluster-network-kmp-traceUpgrade kernel-rt_traceUpgrade ocfs2-kmp-traceUpgrade kernel-default-extraUpgrade kernel-desktop-baseUpgrade ocfs2-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-traceUpgrade gfs2-kmp-bigsmpUpgrade gfs2-kmp-traceUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-pae-extraUpgrade kernel-debug-baseUpgrade kernel-syms-rt | Jan 31, 2014 | Nov 12, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.5.0-45-powerpc64-smpUpgrade linux-image-3.5.0-237-omap4Upgrade linux-image-3.2.0-58-generic-paeUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-3.5.0-45-highbankUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.2.0-58-virtualUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.2.0-58-omapUpgrade linux-image-3.5.0-45-omapUpgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.5.0-45-powerpc-smp | Nov 8, 2024 | Nov 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub