The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade python-perfUpgrade kernel-docUpgrade perfUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade kernel-ppc64Upgrade ocfs2-kmp-paeUpgrade kernel-symsUpgrade kernel-default-develUpgrade ocfs2-kmp-traceUpgrade gfs2-kmp-paeUpgrade kernel-default-extraUpgrade kernel-ppc64-develUpgrade kernel-traceUpgrade gfs2-kmp-traceUpgrade cluster-network-kmp-defaultUpgrade kernel-desktop-baseUpgrade kernel-xen-extraUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-vanillaUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-debug-baseUpgrade kernel-default-manUpgrade kernel-desktopUpgrade cluster-network-kmp-traceUpgrade kernel-desktop-develUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ppc64-baseUpgrade xen-kmp-paeUpgrade kernel-default-baseUpgrade kernel-pae-extraUpgrade kernel-ec2Upgrade kernel-debugUpgrade xen-kmp-defaultUpgrade kernel-defaultUpgrade kernel-trace-extraUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-xenUpgrade xen-kmp-traceUpgrade kernel-trace-develUpgrade cluster-network-kmp-paeUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade cluster-network-kmp-ppc64Upgrade kernel-ec2-baseUpgrade kernel-develUpgrade ocfs2-kmp-ppc64Upgrade cluster-network-kmp-xenUpgrade kernel-docsUpgrade sle-hae-releaseUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade kernel-source-vanilla | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.2.0-41-omapUpgrade linux-image-3.2.0-1430-omap4Upgrade linux-image-3.5.0-28-genericUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.5.0-223-omap4Upgrade linux-image-3.5.0-28-highbank | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub