The rfcomm_sock_recvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-firmwareUpgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-doc | Dec 1, 2016 | Apr 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-xen-develUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-traceUpgrade kernel-syms-rtUpgrade kernel-ppc64-develUpgrade cluster-network-kmp-rt_traceUpgrade kernel-ec2-develUpgrade gfs2-kmp-bigsmpUpgrade ext4dev-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade iscsitarget-kmp-rt_traceUpgrade ocfs2-kmp-ppc64Upgrade cluster-network-kmp-bigsmpUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-rt_trace-baseUpgrade kernel-rt_trace-develUpgrade kernel-defaultUpgrade ocfs2-kmp-paeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-ec2-baseUpgrade kernel-trace-extraUpgrade ext4dev-kmp-paeUpgrade xen-kmp-paeUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-traceUpgrade ocfs2-kmp-bigsmpUpgrade hyper-v-kmp-traceUpgrade cluster-network-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade btrfs-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-pae-extraUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-baseUpgrade ext4dev-kmp-traceUpgrade ofed-kmp-rt_traceUpgrade kernel-rtUpgrade kernel-bigsmpUpgrade kernel-pae-baseUpgrade ocfs2-kmp-rtUpgrade btrfs-kmp-xenUpgrade kernel-bigsmp-baseUpgrade kernel-symsUpgrade kernel-default-extraUpgrade xen-kmp-defaultUpgrade kernel-ec2Upgrade lttng-modules-kmp-rt_traceUpgrade kernel-trace-develUpgrade ofed-kmp-rtUpgrade cluster-network-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-xen-extraUpgrade ext4dev-kmp-xenUpgrade kernel-rt_traceUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-xenUpgrade kernel-xenUpgrade kernel-traceUpgrade cluster-network-kmp-defaultUpgrade hyper-v-kmp-defaultUpgrade kernel-source-rtUpgrade drbd-kmp-rt_traceUpgrade hyper-v-kmp-paeUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-rt-baseUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-bigsmp-develUpgrade sle-hae-releaseUpgrade kernel-pae-develUpgrade xen-kmp-traceUpgrade lttng-modules-kmp-rtUpgrade cluster-network-kmp-xenUpgrade gfs2-kmp-pae | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-353-ec2 | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub