The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-xenU-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-xenUUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-smp-develUpgrade kernel-smpUpgrade kernel-headersUpgrade kernel-hugememUpgrade kernel-hugemem-develUpgrade kernel-devel | Dec 1, 2016 | Aug 18, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 18, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.28-16-iop32x | Nov 8, 2024 | Aug 18, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 18, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub