fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-debug-devel | Dec 1, 2016 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 13, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 21, 2011 |
| Suse | — | Upgrade kernel-pae-develUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.24-29-generic | Nov 8, 2024 | Jun 13, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub