The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-hugememUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-smpUpgrade kernel-debugUpgrade kernel-hugemem-develUpgrade kernel-PAE-debuginfoUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debuginfo-commonUpgrade kernel-xenUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-xenUUpgrade kernel-PAE-develUpgrade kernel-xen-debuginfoUpgrade kernel-debug-debuginfo | Dec 1, 2016 | Feb 22, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 22, 2009 |
| Suse | — | Upgrade kernel-xen-baseUpgrade ext4dev-kmp-vmiUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-sourceUpgrade ext4dev-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-paeUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-vmi-baseUpgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade iscsitarget-kmp-defaultUpgrade kernel-kdumpUpgrade kernel-default-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-23-powerpcUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.22-16-powerpc64-smp | Nov 8, 2024 | Feb 22, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Feb 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub