The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xenUUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xenU-develUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-smp-develUpgrade kernel-hugememUpgrade kernelUpgrade kernel-smpUpgrade kernel-debug-develUpgrade kernel-hugemem-develUpgrade kernel-devel | Dec 1, 2016 | Aug 18, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.24-25-386 | Nov 8, 2024 | Aug 18, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 18, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub