The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade perfUpgrade kernel-headers | Dec 1, 2016 | Jul 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 4, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 4, 2013 |
| Suse | — | Upgrade cluster-network-kmp-bigsmpUpgrade kernel-ec2Upgrade lttng-modules-kmp-rt_traceUpgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade kernel-default-extraUpgrade kernel-rt_traceUpgrade kernel-bigsmpUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-traceUpgrade btrfs-kmp-paeUpgrade kernel-kdumpUpgrade kernel-default-baseUpgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-rt_traceUpgrade kernel-default-manUpgrade ocfs2-kmp-traceUpgrade btrfs-kmp-xenUpgrade kernel-debugUpgrade kernel-xen-extraUpgrade kernel-docsUpgrade kernel-xenUpgrade ocfs2-kmp-rtUpgrade kernel-traceUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-pae-baseUpgrade kernel-trace-develUpgrade kernel-desktop-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-paeUpgrade kernel-bigsmp-develUpgrade kernel-vmiUpgrade kernel-trace-baseUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-pae-develUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade xen-kmp-traceUpgrade ext4dev-kmp-paeUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-rtUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-paeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade xen-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-rt_trace-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-rt-baseUpgrade gfs2-kmp-xenUpgrade kernel-ppc64-baseUpgrade kernel-desktop-develUpgrade hyper-v-kmp-traceUpgrade gfs2-kmp-paeUpgrade kernel-pae-extraUpgrade kernel-rt-develUpgrade kernel-rt_trace-baseUpgrade kernel-ec2-extraUpgrade ofed-kmp-rt_traceUpgrade kernel-ec2-baseUpgrade kernel-trace-extraUpgrade ofed-kmp-rtUpgrade kernel-ppc64-develUpgrade gfs2-kmp-bigsmpUpgrade kernel-xen-baseUpgrade kernel-xenpaeUpgrade ocfs2-kmp-bigsmpUpgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-desktopUpgrade iscsitarget-kmp-rtUpgrade kernel-ppc64Upgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-ppc64Upgrade ext4dev-kmp-defaultUpgrade kernel-bigsmp-baseUpgrade cluster-network-kmp-xenUpgrade kernel-kdumppaeUpgrade xen-kmp-paeUpgrade kernel-develUpgrade btrfs-kmp-defaultUpgrade gfs2-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade sle-hae-releaseUpgrade ext4dev-kmp-xenUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-vmipaeUpgrade kernel-smpUpgrade ocfs2-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade kernel-debug-base | Feb 17, 2015 | Jul 4, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-3.2.0-55-omapUpgrade linux-image-2.6.32-50-386Upgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-50-powerpc64-smpUpgrade linux-image-2.6.32-50-versatileUpgrade linux-image-2.6.32-50-serverUpgrade linux-image-3.5.0-41-powerpc-smpUpgrade linux-image-3.2.0-55-genericUpgrade linux-image-3.2.0-55-powerpc64-smpUpgrade linux-image-3.5.0-41-highbankUpgrade linux-image-3.2.0-55-highbankUpgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-3.2.0-1439-omap4Upgrade linux-image-2.6.32-50-ia64Upgrade linux-image-3.5.0-41-genericUpgrade linux-image-3.2.0-55-powerpc-smpUpgrade linux-image-2.6.32-50-preemptUpgrade linux-image-2.6.32-50-genericUpgrade linux-image-3.2.0-55-generic-paeUpgrade linux-image-3.5.0-233-omap4Upgrade linux-image-2.6.32-50-lpiaUpgrade linux-image-2.6.32-355-ec2Upgrade linux-image-3.8.0-32-genericUpgrade linux-image-3.5.0-41-omapUpgrade linux-image-3.2.0-55-virtualUpgrade linux-image-3.5.0-41-powerpc64-smpUpgrade linux-image-2.6.32-50-virtual | Nov 8, 2024 | Jul 4, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jul 4, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub