The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-debug-develUpgrade kernel-smp-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xenUUpgrade kernel-headersUpgrade kernel-smpUpgrade kernel-largesmpUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-largesmp-devel | Dec 1, 2016 | Oct 19, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 19, 2009 |
| Suse | — | Upgrade iscsitarget-kmp-defaultUpgrade kernel-sourceUpgrade ext4dev-kmp-xenUpgrade kernel-vmiUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-kdumpUpgrade kernel-xen-baseUpgrade kernel-vmi-baseUpgrade oracleasm-kmp-defaultUpgrade kernel-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-ppc64 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.24-26-sparc64-smp | Nov 8, 2024 | Oct 19, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 19, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub