The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-largesmpUpgrade kernel-xenU-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-smp-develUpgrade kernel-smpUpgrade kernel-xenUUpgrade kernel-largesmp-develUpgrade kernel | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-ppc64-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-27-sparc64 | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub