The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-docUpgrade perfUpgrade python-perf | Dec 1, 2016 | Feb 17, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 18, 2013 |
| Suse | — | Upgrade kernel-pae-extraUpgrade kernel-trace-extraUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade ext4dev-kmp-traceUpgrade kernel-ppc64Upgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade kernel-ec2-develUpgrade kernel-trace-baseUpgrade xen-kmp-traceUpgrade ext4dev-kmp-xenUpgrade btrfs-kmp-paeUpgrade kernel-ec2Upgrade hyper-v-kmp-defaultUpgrade kernel-traceUpgrade kernel-xen-extraUpgrade kernel-default-develUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-45-virtualUpgrade linux-image-2.6.32-45-powerpc64-smpUpgrade linux-image-2.6.32-45-powerpc-smpUpgrade linux-image-2.6.32-45-preemptUpgrade linux-image-2.6.32-45-versatileUpgrade linux-image-2.6.32-45-ia64Upgrade linux-image-3.2.0-36-genericUpgrade linux-image-3.0.0-30-omapUpgrade linux-image-3.2.0-36-omapUpgrade linux-image-2.6.32-350-ec2Upgrade linux-image-2.6.32-45-sparc64Upgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.0.0-1220-omap4Upgrade linux-image-2.6.32-45-serverUpgrade linux-image-2.6.32-45-lpiaUpgrade linux-image-3.0.0-30-generic-paeUpgrade linux-image-3.0.0-30-powerpc64-smpUpgrade linux-image-3.2.0-36-powerpc-smpUpgrade linux-image-3.0.0-30-genericUpgrade linux-image-3.2.0-1424-omap4Upgrade linux-image-3.0.0-30-powerpc-smpUpgrade linux-image-3.5.0-217-omap4Upgrade linux-image-2.6.32-45-386Upgrade linux-image-3.5.0-22-highbankUpgrade linux-image-3.2.0-36-highbankUpgrade linux-image-3.0.0-30-powerpcUpgrade linux-image-2.6.32-45-genericUpgrade linux-image-3.5.0-22-powerpc-smpUpgrade linux-image-2.6.32-45-powerpcUpgrade linux-image-3.2.0-36-virtualUpgrade linux-image-3.0.0-30-virtualUpgrade linux-image-3.2.0-36-generic-paeUpgrade linux-image-2.6.32-45-generic-paeUpgrade linux-image-3.5.0-22-powerpc64-smpUpgrade linux-image-3.0.0-30-serverUpgrade linux-image-2.6.32-45-sparc64-smpUpgrade linux-image-3.2.0-36-powerpc64-smpUpgrade linux-image-3.5.0-22-omap | Nov 8, 2024 | Feb 18, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub