kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-docUpgrade kernel-headers | Dec 1, 2016 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 13, 2012 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-ec2Upgrade kernel-symsUpgrade kernel-paeUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-xen-extraUpgrade kernel-trace-extraUpgrade xen-kmp-traceUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-default-extraUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade xen-kmp-paeUpgrade kernel-ec2-develUpgrade xen-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade kernel-ppc64Upgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-pae-extraUpgrade kernel-default-baseUpgrade kernel-pae-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-3.0.0-13-virtualUpgrade linux-image-3.0.0-13-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-3.0.0-13-powerpcUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-35-ia64Upgrade linux-image-3.0.0-13-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-3.0.0-13-genericUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-3.0.0-13-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-3.0.0-13-serverUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-3.0.0-13-omapUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.31-611-imx51 | Nov 8, 2024 | Jun 13, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub