The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-devel | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade hyper-v-kmp-traceUpgrade kernel-kdumpUpgrade ext4dev-kmp-traceUpgrade kernel-paeUpgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade ext4dev-kmp-xenUpgrade xen-kmp-paeUpgrade kernel-smpUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-vmiUpgrade kernel-debugUpgrade btrfs-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-bigsmpUpgrade ext4dev-kmp-paeUpgrade kernel-defaultUpgrade kernel-vmipaeUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-xenpaeUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-symsUpgrade kernel-kdumppaeUpgrade kernel-pae-baseUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-trace-develUpgrade xen-kmp-trace | Jan 12, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-56-highbankUpgrade linux-image-3.2.0-56-omapUpgrade linux-image-3.2.0-56-virtualUpgrade linux-image-2.6.32-53-powerpcUpgrade linux-image-2.6.32-53-powerpc64-smpUpgrade linux-image-2.6.32-53-sparc64Upgrade linux-image-3.5.0-42-highbankUpgrade linux-image-2.6.32-53-genericUpgrade linux-image-3.5.0-234-omap4Upgrade linux-image-2.6.32-53-ia64Upgrade linux-image-2.6.32-53-virtualUpgrade linux-image-3.8.0-33-genericUpgrade linux-image-2.6.32-53-sparc64-smpUpgrade linux-image-2.6.32-53-preemptUpgrade linux-image-3.2.0-56-genericUpgrade linux-image-2.6.32-53-386Upgrade linux-image-3.2.0-56-powerpc-smpUpgrade linux-image-3.2.0-1440-omap4Upgrade linux-image-3.2.0-56-generic-paeUpgrade linux-image-3.5.0-42-genericUpgrade linux-image-3.5.0-42-powerpc-smpUpgrade linux-image-2.6.32-53-serverUpgrade linux-image-2.6.32-53-versatileUpgrade linux-image-2.6.32-53-generic-paeUpgrade linux-image-3.5.0-42-omapUpgrade linux-image-2.6.32-358-ec2Upgrade linux-image-2.6.32-53-lpiaUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-56-powerpc64-smpUpgrade linux-image-2.6.32-53-powerpc-smpUpgrade linux-image-3.5.0-42-powerpc64-smp | Nov 8, 2024 | Jun 7, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jun 7, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub