The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-ps3Upgrade kernel-rt_debugUpgrade kernel-ppc64Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-debug | Feb 17, 2015 | Sep 16, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-21-sparc64Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.24-21-lpiaUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.24-21-genericUpgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.24-21-rtUpgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.24-21-sparc64-smpUpgrade linux-image-2.6.24-21-hppa32Upgrade linux-image-2.6.24-21-xenUpgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-21-virtualUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-virtualUpgrade linux-image-2.6.24-21-powerpc64-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-21-powerpcUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.24-21-mckinleyUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.24-21-itaniumUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.24-21-openvzUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.24-21-lpiacompatUpgrade linux-image-2.6.24-21-386Upgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-21-powerpc-smpUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.24-21-serverUpgrade linux-image-2.6.24-21-hppa64 | Nov 8, 2024 | Sep 16, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub