net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-debug | Dec 1, 2016 | Jul 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 18, 2011 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-rt_trace-baseUpgrade brocade-bna-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt_trace-develUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-iseries64Upgrade kernel-kdumppaeUpgrade kernel-smpUpgrade kernel-vmipaeUpgrade kernel-syms-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-bigsmpUpgrade ofed-kmp-rtUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-kdumpUpgrade cluster-network-kmp-rtUpgrade kernel-vmiUpgrade kernel-source-rtUpgrade kernel-ppc64Upgrade ocfs2-kmp-rt_traceUpgrade kernel-rt-baseUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-defaultUpgrade iscsitarget-kmp-rtUpgrade kernel-xenpaeUpgrade drbd-kmp-rt_traceUpgrade kernel-rt_trace | Feb 17, 2015 | Jul 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-27-ia64 | Nov 8, 2024 | Jul 18, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Jul 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub