The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-firmwareUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-doc | Dec 1, 2016 | Jan 6, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2013 |
| Suse | — | Upgrade kernel-ec2-develUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade btrfs-kmp-defaultUpgrade kernel-defaultUpgrade ext4dev-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade kernel-xen-develUpgrade hyper-v-kmp-defaultUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-traceUpgrade ext4dev-kmp-xenUpgrade kernel-sourceUpgrade kernel-default-develUpgrade hyper-v-kmp-paeUpgrade kernel-xenUpgrade btrfs-kmp-xenUpgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade kernel-ec2Upgrade ext4dev-kmp-paeUpgrade btrfs-kmp-paeUpgrade kernel-default-manUpgrade kernel-symsUpgrade xen-kmp-traceUpgrade kernel-trace-devel | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.5.0-239-omap4 | Nov 8, 2024 | Jan 6, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub