The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenU-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-xenUUpgrade kernel-largesmp | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-kdumppaeUpgrade kernel-paeUpgrade xen-kmpUpgrade kernel-default-extraUpgrade kernel-pmac64Upgrade um-host-kernelUpgrade kernel-xen-develUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-trace-baseUpgrade kernel-pae-baseUpgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-s390-debugUpgrade kernel-ppc64-extraUpgrade kernel-sn2Upgrade kernel-xenUpgrade kernel-default-develUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-baseUpgrade kernel-develUpgrade kernel-s390x-debugUpgrade kernel-debug-develUpgrade kernel-pae-develUpgrade brocade-bna-kmp-rtUpgrade kernel-s390Upgrade kernel-desktop-baseUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-vanillaUpgrade kernel-umUpgrade kernel-rt-baseUpgrade kernel-trace-extraUpgrade kernel-traceUpgrade kernel-vanilla-baseUpgrade kernel-desktopUpgrade ofed-kmp-rtUpgrade kernel-default-baseUpgrade kernel-xen-extraUpgrade kernel-ec2-develUpgrade kernel-vmi-baseUpgrade kernel-syms-rtUpgrade kernel-vmi-develUpgrade kernel-source-vanillaUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade preload-kmp-defaultUpgrade kernel-pseries64Upgrade kernel-rt_traceUpgrade kernel-docsUpgrade um-host-install-initrdUpgrade kernel-vanilla-develUpgrade kernel-debug-extraUpgrade kernel-s390xUpgrade kernel-kdumpUpgrade kernel-ec2-baseUpgrade preload-kmp-desktopUpgrade kernel-ec2-extraUpgrade kernel-source-rtUpgrade kernel-debug-baseUpgrade kernel-pae-extraUpgrade kernel-rt_trace-baseUpgrade kernel-ps3Upgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-64k-pagesizeUpgrade kernel-rt_trace-develUpgrade kernel-xenpaeUpgrade kernel-smpUpgrade kernel-rt | Feb 17, 2015 | Nov 29, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.31-112-imx51 | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub