The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel memory via vectors involving a dump operation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2942.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-docUpgrade kernel-hugemem-develUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-xenU-develUpgrade kernel-smpUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-hugememUpgrade kernel-xenUUpgrade kernelUpgrade kernel-smp-devel | Dec 1, 2016 | Sep 21, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 21, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-25-powerpc64-smpUpgrade linux-image-2.6.32-25-sparc64-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.32-25-lpiaUpgrade linux-image-2.6.35-22-powerpcUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-25-386Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-25-genericUpgrade linux-image-2.6.32-25-ia64Upgrade linux-image-2.6.32-25-powerpcUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-25-preemptUpgrade linux-image-2.6.35-22-versatileUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-25-virtualUpgrade linux-image-2.6.32-25-sparc64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-22-genericUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-25-powerpc-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.35-22-serverUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-25-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-22-powerpc-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.35-22-omapUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.32-25-generic-paeUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.35-22-powerpc64-smpUpgrade linux-image-2.6.32-25-versatileUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.35-22-virtualUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-309-ec2Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-22-generic-paeUpgrade linux-image-2.6.15-55-amd64-server | Nov 8, 2024 | Sep 21, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Sep 21, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub