The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-PAE-develUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade python-perfUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debug | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade ext4dev-kmp-traceUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-smpUpgrade xen-kmp-traceUpgrade kernel-vanilla-develUpgrade kernel-default-baseUpgrade kernel-kdumpUpgrade btrfs-kmp-defaultUpgrade kernel-defaultUpgrade xen-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-xenpaeUpgrade kernel-desktop-develUpgrade kernel-ec2-baseUpgrade xen-kmp-paeUpgrade kernel-trace-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-pae-develUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-traceUpgrade kernel-trace-develUpgrade btrfs-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-vmipaeUpgrade kernel-xen-baseUpgrade btrfs-kmp-xenUpgrade kernel-default-manUpgrade kernel-desktopUpgrade kernel-paeUpgrade kernel-debug-baseUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-vanillaUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-kdumppaeUpgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-sourceUpgrade kernel-desktop-baseUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade kernel-vmi | Dec 12, 2013 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-49-386Upgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-44-omapUpgrade linux-image-2.6.32-49-preemptUpgrade linux-image-2.6.32-354-ec2Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-49-virtualUpgrade linux-image-3.2.0-1432-omap4Upgrade linux-image-3.2.0-44-genericUpgrade linux-image-3.2.0-44-generic-paeUpgrade linux-image-2.6.32-49-sparc64-smpUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-49-generic-paeUpgrade linux-image-2.6.32-49-genericUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.2.0-44-powerpc-smpUpgrade linux-image-2.6.32-49-powerpcUpgrade linux-image-2.6.32-49-lpiaUpgrade linux-image-2.6.32-49-powerpc64-smpUpgrade linux-image-2.6.32-49-serverUpgrade linux-image-2.6.32-49-ia64Upgrade linux-image-3.2.0-44-powerpc64-smpUpgrade linux-image-2.6.32-49-powerpc-smpUpgrade linux-image-2.6.32-49-sparc64Upgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-49-versatileUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.2.0-44-highbankUpgrade linux-image-3.2.0-44-virtual | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub