arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-docUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-xenUUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-hugemem-devel | Dec 1, 2016 | Oct 20, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 2, 2018 | Oct 20, 2009 |
| Suse | — | Upgrade kernel-vmi-baseUpgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-vmiUpgrade kernel-paeUpgrade kernel-default-manUpgrade kernel-xenUpgrade ext4dev-kmp-vmiUpgrade oracleasm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-syms | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.24-26-xenUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.27-16-generic | Nov 8, 2024 | Oct 20, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 20, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub