The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-PAE-develUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-firmwareUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-devel | Dec 1, 2016 | May 11, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 11, 2014 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 11, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | May 11, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-60-386Upgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.13.0-27-powerpc-e500Upgrade linux-image-2.6.32-60-preemptUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.13.0-27-genericUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-2.6.32-60-genericUpgrade linux-image-2.6.32-60-lpiaUpgrade linux-image-2.6.32-60-generic-paeUpgrade linux-image-2.6.32-60-powerpc-smpUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.13.0-27-lowlatencyUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.13.0-27-powerpc64-embUpgrade linux-image-3.13.0-27-powerpc-smpUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-3.13.0-30-genericUpgrade linux-image-2.6.32-60-virtualUpgrade linux-image-3.13.0-27-powerpc-e500mcUpgrade linux-image-2.6.32-60-powerpcUpgrade linux-image-3.13.0-27-powerpc64-smpUpgrade linux-image-2.6.32-60-sparc64-smpUpgrade linux-image-2.6.32-60-ia64Upgrade linux-image-2.6.32-60-versatileUpgrade linux-image-2.6.32-364-ec2Upgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-2.6.32-60-serverUpgrade linux-image-3.13.0-27-generic-lpaeUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.2.0-63-omapUpgrade linux-image-2.6.32-60-powerpc64-smpUpgrade linux-image-2.6.32-60-sparc64Upgrade linux-image-3.2.0-63-generic | Nov 8, 2024 | May 11, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub