net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-develUpgrade kernelUpgrade kernel-debug | Dec 1, 2016 | Jul 18, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 18, 2011 |
| Suse | — | Upgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-rt_traceUpgrade kernel-vmiUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-debugUpgrade ofed-kmp-rtUpgrade kernel-rt-develUpgrade drbd-kmp-rt_traceUpgrade kernel-source-rtUpgrade cluster-network-kmp-rtUpgrade kernel-rt-baseUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-iseries64Upgrade kernel-smpUpgrade kernel-kdumppaeUpgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-bigsmpUpgrade brocade-bna-kmp-rtUpgrade kernel-rt_trace-baseUpgrade kernel-rt_trace-develUpgrade kernel-xenUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-source | Feb 17, 2015 | Jul 18, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.35-24-virtual | Nov 8, 2024 | Jul 18, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Jul 18, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub