The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-xen-develUpgrade perfUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xen | Dec 1, 2016 | Jul 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 4, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 4, 2013 |
| Suse | — | Upgrade kernel-bigsmp-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64Upgrade gfs2-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-desktopUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-smpUpgrade ext4dev-kmp-traceUpgrade kernel-rt_trace-develUpgrade kernel-ec2-extraUpgrade ofed-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-rt-baseUpgrade kernel-vmipaeUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade ocfs2-kmp-bigsmpUpgrade cluster-network-kmp-defaultUpgrade kernel-rtUpgrade xen-kmp-defaultUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-xenUpgrade kernel-xenpaeUpgrade gfs2-kmp-xenUpgrade kernel-symsUpgrade ofed-kmp-rt_traceUpgrade hyper-v-kmp-traceUpgrade kernel-trace-extraUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-bigsmpUpgrade iscsitarget-kmp-rtUpgrade kernel-ppc64-baseUpgrade sle-hae-releaseUpgrade kernel-develUpgrade kernel-vanillaUpgrade gfs2-kmp-traceUpgrade kernel-kdumppaeUpgrade btrfs-kmp-defaultUpgrade kernel-debug-baseUpgrade gfs2-kmp-ppc64Upgrade kernel-pae-extraUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-desktop-develUpgrade xen-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-rt-develUpgrade kernel-ppc64-develUpgrade lttng-modules-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-develUpgrade cluster-network-kmp-bigsmpUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade btrfs-kmp-paeUpgrade kernel-trace-develUpgrade ocfs2-kmp-rt_traceUpgrade lttng-modules-kmp-rt_traceUpgrade cluster-network-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-xen-extraUpgrade kernel-syms-rtUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-rtUpgrade kernel-vmiUpgrade kernel-trace-baseUpgrade iscsitarget-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade kernel-pae-baseUpgrade kernel-bigsmp-develUpgrade kernel-rt_traceUpgrade cluster-network-kmp-traceUpgrade kernel-debugUpgrade btrfs-kmp-xenUpgrade cluster-network-kmp-rt_traceUpgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade kernel-vanilla-develUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-desktop-baseUpgrade kernel-source-rtUpgrade kernel-default-manUpgrade ocfs2-kmp-traceUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-bigsmpUpgrade kernel-debug-develUpgrade hyper-v-kmp-defaultUpgrade kernel-default-baseUpgrade ext4dev-kmp-paeUpgrade kernel-kdumpUpgrade drbd-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-pae-develUpgrade kernel-xen | Feb 17, 2015 | Jul 4, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-50-serverUpgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-3.2.0-55-genericUpgrade linux-image-3.5.0-41-powerpc-smpUpgrade linux-image-2.6.32-50-386Upgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-3.2.0-55-powerpc64-smpUpgrade linux-image-2.6.32-50-powerpc64-smpUpgrade linux-image-2.6.32-50-versatileUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-3.5.0-41-highbankUpgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-3.2.0-55-omapUpgrade linux-image-3.2.0-55-highbankUpgrade linux-image-3.2.0-55-powerpc-smpUpgrade linux-image-3.2.0-55-virtualUpgrade linux-image-2.6.32-50-genericUpgrade linux-image-3.8.0-32-genericUpgrade linux-image-2.6.32-50-virtualUpgrade linux-image-3.5.0-41-omapUpgrade linux-image-3.5.0-41-genericUpgrade linux-image-2.6.32-50-preemptUpgrade linux-image-3.2.0-55-generic-paeUpgrade linux-image-3.5.0-41-powerpc64-smpUpgrade linux-image-3.5.0-233-omap4Upgrade linux-image-2.6.32-355-ec2Upgrade linux-image-3.2.0-1439-omap4Upgrade linux-image-2.6.32-50-ia64Upgrade linux-image-2.6.32-50-lpia | Nov 8, 2024 | Jul 4, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jul 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub