The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-PAE | Dec 1, 2016 | Sep 21, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 21, 2010 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-kdumpUpgrade ext4dev-kmp-defaultUpgrade kernel-paeUpgrade kernel-xenUpgrade ext4dev-kmp-paeUpgrade kernel-vmiUpgrade ext4dev-kmp-vmiUpgrade kernel-trace-baseUpgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-vmi-baseUpgrade kernel-pae-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-docsUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-default-manUpgrade kernel-symsUpgrade oracleasm-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-ppc64-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-25-server | Nov 8, 2024 | Sep 21, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Sep 21, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub