The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-PAE-devel | Dec 1, 2016 | Mar 1, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 1, 2011 |
| Suse | — | Upgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-docsUpgrade kernel-ppc64-baseUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-default-extraUpgrade kernel-xenUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-trace-baseUpgrade kernel-default-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-pae | Nov 8, 2024 | Mar 1, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Mar 1, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub