The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-default-manUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-paeUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade oracleasm-kmp-defaultUpgrade kernel-default-baseUpgrade iscsitarget-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-686 | Nov 8, 2024 | Aug 28, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 28, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub