The rfcomm_sock_recvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernelUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-headers | Dec 1, 2016 | Apr 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-pae-extraUpgrade hyper-v-kmp-traceUpgrade iscsitarget-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-bigsmpUpgrade ocfs2-kmp-paeUpgrade gfs2-kmp-bigsmpUpgrade gfs2-kmp-traceUpgrade iscsitarget-kmp-rtUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rtUpgrade kernel-ppc64-develUpgrade kernel-trace-extraUpgrade ext4dev-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade btrfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-bigsmpUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-paeUpgrade ocfs2-kmp-ppc64Upgrade ofed-kmp-rt_traceUpgrade cluster-network-kmp-ppc64Upgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-ec2-baseUpgrade sle-hae-releaseUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-pae-develUpgrade xen-kmp-traceUpgrade ext4dev-kmp-xenUpgrade kernel-xenUpgrade kernel-rt_traceUpgrade kernel-xen-extraUpgrade ocfs2-kmp-rt_traceUpgrade xen-kmp-defaultUpgrade kernel-source-rtUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-defaultUpgrade kernel-bigsmp-develUpgrade lttng-modules-kmp-rtUpgrade ofed-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-xenUpgrade kernel-traceUpgrade kernel-default-extraUpgrade lttng-modules-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade drbd-kmp-rtUpgrade kernel-bigsmpUpgrade kernel-rt-baseUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-bigsmp-baseUpgrade btrfs-kmp-paeUpgrade gfs2-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade gfs2-kmp-xenUpgrade kernel-trace-baseUpgrade cluster-network-kmp-paeUpgrade kernel-symsUpgrade btrfs-kmp-xenUpgrade kernel-source | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-2.6.32-48-386Upgrade linux-image-3.5.0-34-omapUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-versatile | Nov 8, 2024 | Apr 22, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub