dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-smpUpgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-64k-pagesizeUpgrade kernel-debugUpgrade um-host-install-initrdUpgrade kernel-pmac64Upgrade kernel-s390Upgrade um-host-kernelUpgrade kernel-umUpgrade kernel-sn2 | Feb 17, 2015 | Jan 6, 2006 |
| Ubuntu | — | Upgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.8.1-6-powerpc-smpUpgrade linux-image-2.6.8.1-6-amd64-xeonUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.8.1-6-amd64-genericUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.8.1-6-power4Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.8.1-6-power3-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.8.1-6-powerpcUpgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.10-6-amd64-xeon | Nov 8, 2024 | Jan 6, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub