arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUUpgrade kernel-xenU-develUpgrade kernel-smpUpgrade kernel-xenUpgrade kernel-smp-develUpgrade kernel-docUpgrade kernel-hugememUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-hugemem-devel | Dec 1, 2016 | Oct 20, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 2, 2018 | Oct 20, 2009 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-symsUpgrade kernel-vmiUpgrade ext4dev-kmp-vmiUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade oracleasm-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-sourceUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-vmi-baseUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-kdumpUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-ppc64 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-17-versatileUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.24-26-sparc64-smp | Nov 8, 2024 | Oct 20, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 20, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub