The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
CVSS Details
- CVSS 3.1 Base Score: 7.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade btrfs-kmp-xenUpgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-xen-extraUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade btrfs-kmp-paeUpgrade kernel-pae-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-traceUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade btrfs-kmp-defaultUpgrade hyper-v-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade kernel-desktop-develUpgrade kernel-default-manUpgrade ext4dev-kmp-ppc64Upgrade kernel-ec2-baseUpgrade kernel-ppc64-baseUpgrade kernel-pae-extraUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade hyper-v-kmp-pae | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-virtual | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub