The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-largesmp-develUpgrade kernel-xenUUpgrade kernel-smpUpgrade kernelUpgrade kernel-largesmpUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-xenU-devel | Dec 1, 2016 | Dec 30, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 30, 2010 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-default-baseUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade kernel-default-manUpgrade kernel-paeUpgrade kernel-default | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-314-ec2Upgrade linux-image-2.6.15-57-amd64-k8Upgrade linux-image-2.6.31-23-serverUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.31-23-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.15-57-mckinley-smpUpgrade linux-image-2.6.31-308-ec2Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-23-powerpcUpgrade linux-image-2.6.31-23-virtualUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.15-57-sparc64Upgrade linux-image-2.6.15-57-hppa64Upgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.31-23-386Upgrade linux-image-2.6.15-57-amd64-serverUpgrade linux-image-2.6.15-57-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.15-57-amd64-xeonUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.15-57-hppa32Upgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.15-57-amd64-genericUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.31-23-ia64Upgrade linux-image-2.6.15-57-itaniumUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.15-57-powerpc64-smpUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.15-57-serverUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.15-57-k7Upgrade linux-image-2.6.15-57-sparc64-smpUpgrade linux-image-2.6.15-57-itanium-smpUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.31-23-powerpc-smpUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.15-57-hppa32-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.15-57-hppa64-smpUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.31-23-sparc64-smpUpgrade linux-image-2.6.15-57-server-bigironUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.15-57-686Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.31-23-lpiaUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.15-57-386Upgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.31-23-sparc64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.31-23-generic-paeUpgrade linux-image-2.6.15-57-mckinleyUpgrade linux-image-2.6.31-23-powerpc64-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.15-57-powerpc-smp | Nov 8, 2024 | Dec 30, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Dec 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub