The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-smpUpgrade kernel-docUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-largesmpUpgrade kernel-xenUUpgrade kernel-develUpgrade kernel-largesmp-devel | Dec 1, 2016 | Dec 30, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 30, 2010 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-pae-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-57-hppa64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.15-57-amd64-genericUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-314-ec2Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.15-57-mckinley-smpUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.31-23-serverUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.31-23-genericUpgrade linux-image-2.6.31-308-ec2Upgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.31-23-386Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.15-57-sparc64Upgrade linux-image-2.6.15-57-amd64-k8Upgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.31-23-powerpcUpgrade linux-image-2.6.15-57-amd64-xeonUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.15-57-amd64-serverUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.15-57-powerpcUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.15-57-hppa32Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-23-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.15-57-k7Upgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-57-itanium-smpUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.31-23-powerpc-smpUpgrade linux-image-2.6.15-57-686Upgrade linux-image-2.6.31-23-sparc64Upgrade linux-image-2.6.31-23-generic-paeUpgrade linux-image-2.6.15-57-powerpc-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-23-lpiaUpgrade linux-image-2.6.15-57-sparc64-smpUpgrade linux-image-2.6.15-57-mckinleyUpgrade linux-image-2.6.15-57-serverUpgrade linux-image-2.6.31-23-powerpc64-smpUpgrade linux-image-2.6.15-57-server-bigironUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.31-23-ia64Upgrade linux-image-2.6.15-57-powerpc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.31-23-sparc64-smpUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.15-57-itaniumUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.15-57-hppa64-smpUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.15-57-hppa32-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.15-57-386Upgrade linux-image-2.6.32-28-sparc64 | Nov 8, 2024 | Dec 30, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Dec 30, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub