The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-xenUUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xenU-develUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-hugememUpgrade kernel-headersUpgrade kernelUpgrade kernel-hugemem-develUpgrade kernel-smp-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-smp | Dec 1, 2016 | Aug 18, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc | Nov 8, 2024 | Aug 18, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 18, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub