The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-smp-develUpgrade kernel-largesmp-develUpgrade kernel-xenUUpgrade kernel-largesmpUpgrade kernel-smpUpgrade kernel-xenU-develUpgrade kernel-develUpgrade kernel-doc | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-ppc64Upgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ppc64-develUpgrade kernel-ppc64-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-28-server | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub