The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Apr 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade cluster-network-kmp-bigsmpUpgrade ocfs2-kmp-bigsmpUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-bigsmpUpgrade xen-kmp-defaultUpgrade kernel-xenpaeUpgrade kernel-ec2-develUpgrade ext4dev-kmp-traceUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-ppc64Upgrade kernel-rt-develUpgrade kernel-ppc64-develUpgrade kernel-rt_traceUpgrade kernel-default-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-docsUpgrade ofed-kmp-rtUpgrade kernel-defaultUpgrade kernel-desktop-develUpgrade kernel-rtUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-traceUpgrade kernel-ppc64Upgrade ocfs2-kmp-defaultUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-xenUpgrade kernel-rt_trace-baseUpgrade kernel-rt_trace-develUpgrade ext4dev-kmp-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-source-rtUpgrade btrfs-kmp-defaultUpgrade kernel-desktop-baseUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade xen-kmp-paeUpgrade kernel-source-vanillaUpgrade hyper-v-kmp-paeUpgrade ocfs2-kmp-traceUpgrade kernel-pae-extraUpgrade kernel-kdumpUpgrade ofed-kmp-rt_traceUpgrade kernel-smpUpgrade ext4dev-kmp-xenUpgrade ocfs2-kmp-ppc64Upgrade hyper-v-kmp-traceUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade drbd-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade cluster-network-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-xen-extraUpgrade kernel-xen-develUpgrade gfs2-kmp-paeUpgrade cluster-network-kmp-xenUpgrade btrfs-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-sourceUpgrade kernel-bigsmp-develUpgrade xen-kmp-traceUpgrade kernel-kdumppaeUpgrade ext4dev-kmp-paeUpgrade kernel-vanillaUpgrade kernel-develUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-xenUpgrade lttng-modules-kmp-rtUpgrade cluster-network-kmp-traceUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rt_traceUpgrade kernel-debug-baseUpgrade ocfs2-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-vmiUpgrade kernel-traceUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-vmipaeUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-pae-develUpgrade kernel-rt-baseUpgrade kernel-default-manUpgrade sle-hae-releaseUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-bigsmpUpgrade iscsitarget-kmp-rtUpgrade kernel-bigsmp-baseUpgrade kernel-desktop | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-powerpc64-smp | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub