The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade um-host-install-initrdUpgrade kernel-s390Upgrade kernel-sn2Upgrade kernel-smpUpgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade um-host-kernelUpgrade kernel-bigsmpUpgrade kernel-umUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-pseries64Upgrade kernel-pmac64Upgrade kernel-iseries64Upgrade kernel-syms | Feb 17, 2015 | Oct 10, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub