net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-xen | Dec 1, 2016 | Apr 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade gfs2-kmp-bigsmpUpgrade xen-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade ext4dev-kmp-defaultUpgrade kernel-bigsmpUpgrade kernel-ec2Upgrade ocfs2-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-debug-baseUpgrade kernel-bigsmp-develUpgrade ocfs2-kmp-ppc64Upgrade ext4dev-kmp-traceUpgrade kernel-sourceUpgrade lttng-modules-kmp-rtUpgrade kernel-pae-develUpgrade kernel-desktop-baseUpgrade ocfs2-kmp-paeUpgrade kernel-paeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade hyper-v-kmp-traceUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-docsUpgrade ocfs2-kmp-rt_traceUpgrade kernel-rt_traceUpgrade kernel-traceUpgrade kernel-rtUpgrade kernel-vmipaeUpgrade kernel-pae-extraUpgrade kernel-ppc64-baseUpgrade hyper-v-kmp-paeUpgrade btrfs-kmp-defaultUpgrade kernel-smpUpgrade kernel-source-rtUpgrade cluster-network-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-pae-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-rt-develUpgrade ocfs2-kmp-xenUpgrade kernel-desktopUpgrade kernel-rt_trace-baseUpgrade kernel-xenpaeUpgrade kernel-xen-develUpgrade cluster-network-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ofed-kmp-rtUpgrade kernel-xen-extraUpgrade kernel-default-baseUpgrade kernel-desktop-develUpgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade kernel-vanillaUpgrade cluster-network-kmp-bigsmpUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-kdumpUpgrade ofed-kmp-rt_traceUpgrade kernel-kdumppaeUpgrade kernel-debugUpgrade kernel-defaultUpgrade btrfs-kmp-paeUpgrade kernel-rt_trace-develUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-debug-develUpgrade ocfs2-kmp-bigsmpUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade xen-kmp-defaultUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-symsUpgrade gfs2-kmp-traceUpgrade kernel-trace-baseUpgrade btrfs-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-ppc64-develUpgrade kernel-ec2-baseUpgrade drbd-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-bigsmp-baseUpgrade kernel-default-develUpgrade cluster-network-kmp-xenUpgrade sle-hae-releaseUpgrade drbd-kmp-rt_traceUpgrade ext4dev-kmp-xenUpgrade gfs2-kmp-xenUpgrade cluster-network-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-vmiUpgrade kernel-ppc64 | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-2.6.32-48-386Upgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.2.0-48-powerpc-smp | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub