The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 12, 2007 |
| Suse | — | Upgrade kernel-xenpaeUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade suse-releaseUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-xen | Feb 17, 2015 | Mar 12, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-server | Nov 8, 2024 | Mar 12, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub