The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-docUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-devel | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-kdumpUpgrade btrfs-kmp-paeUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-smpUpgrade kernel-paeUpgrade xen-kmp-paeUpgrade hyper-v-kmp-traceUpgrade kernel-default-develUpgrade kernel-xenUpgrade ext4dev-kmp-traceUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade btrfs-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-default-baseUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-xenpaeUpgrade kernel-bigsmpUpgrade xen-kmp-traceUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-kdumppaeUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-vmipaeUpgrade kernel-default | Jan 12, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-53-sparc64Upgrade linux-image-3.5.0-42-highbankUpgrade linux-image-3.2.0-56-omapUpgrade linux-image-3.2.0-56-virtualUpgrade linux-image-2.6.32-53-powerpcUpgrade linux-image-2.6.32-53-genericUpgrade linux-image-2.6.32-53-powerpc64-smpUpgrade linux-image-3.5.0-234-omap4Upgrade linux-image-3.2.0-56-highbankUpgrade linux-image-2.6.32-358-ec2Upgrade linux-image-3.2.0-56-powerpc-smpUpgrade linux-image-2.6.32-53-lpiaUpgrade linux-image-2.6.32-53-generic-paeUpgrade linux-image-3.5.0-42-powerpc-smpUpgrade linux-image-3.5.0-42-omapUpgrade linux-image-2.6.32-53-virtualUpgrade linux-image-3.8.0-33-genericUpgrade linux-image-3.2.0-56-generic-paeUpgrade linux-image-3.2.0-56-genericUpgrade linux-image-2.6.32-53-preemptUpgrade linux-image-2.6.32-53-ia64Upgrade linux-image-2.6.32-53-sparc64-smpUpgrade linux-image-2.6.32-53-386Upgrade linux-image-3.2.0-1440-omap4Upgrade linux-image-2.6.32-53-serverUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-56-powerpc64-smpUpgrade linux-image-3.5.0-42-powerpc64-smpUpgrade linux-image-2.6.32-53-versatileUpgrade linux-image-3.5.0-42-genericUpgrade linux-image-2.6.32-53-powerpc-smp | Nov 8, 2024 | Jun 7, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub