The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUUpgrade kernel-develUpgrade kernel-smpUpgrade kernel-PAE-develUpgrade kernel-largesmp-develUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-xenU-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-largesmpUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-PAE | Dec 1, 2016 | Oct 19, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 19, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-17-versatileUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.24-26-lpia | Nov 8, 2024 | Oct 19, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 19, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub