The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenU-develUpgrade kernel-xenUpgrade kernel-xenUUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-commonUpgrade kernel-smp-develUpgrade kernel-PAE-develUpgrade kernel-xen-debuginfoUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-hugemem-develUpgrade kernel-headersUpgrade kernel-hugememUpgrade kernel-smpUpgrade kernel-debug-develUpgrade kernel-PAE-debuginfo | Dec 1, 2016 | Feb 22, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 22, 2009 |
| Suse | — | Upgrade kernel-vmi-baseUpgrade ext4dev-kmp-ppc64Upgrade iscsitarget-kmp-defaultUpgrade kernel-default-baseUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-vmiUpgrade ext4dev-kmp-defaultUpgrade kernel-symsUpgrade ext4dev-kmp-vmiUpgrade kernel-xen-baseUpgrade ext4dev-kmp-paeUpgrade oracleasm-kmp-defaultUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.24-23-386Upgrade linux-image-2.6.24-23-genericUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-23-hppa32Upgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-23-powerpc64-smpUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.24-23-openvzUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.24-23-hppa64Upgrade linux-image-2.6.27-11-genericUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.24-23-serverUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-23-sparc64-smpUpgrade linux-image-2.6.22-16-386Upgrade linux-image-2.6.27-11-virtualUpgrade linux-image-2.6.24-23-lpiaUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-23-sparc64Upgrade linux-image-2.6.24-23-mckinleyUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.24-23-rtUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-23-lpiacompatUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-23-itaniumUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.27-11-serverUpgrade linux-image-2.6.24-23-xenUpgrade linux-image-2.6.24-23-virtualUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-23-powerpc-smpUpgrade linux-image-2.6.24-23-powerpc | Nov 8, 2024 | Feb 22, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Feb 22, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub