The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensitive information (kernel memory).
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-smp-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-xenU-develUpgrade kernel-docUpgrade kernel-xenUUpgrade kernel-hugemem-develUpgrade kernel-xenUpgrade kernel-smpUpgrade kernel-hugemem | Dec 1, 2016 | Apr 6, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 6, 2010 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-vmiUpgrade kernel-s390x-debugUpgrade kernel-debugUpgrade kernel-s390xUpgrade xen-kmpUpgrade kernel-xenUpgrade kernel-64k-pagesizeUpgrade um-host-kernelUpgrade kernel-vmipaeUpgrade kernel-pmac64Upgrade sap-aio-releaseUpgrade kernel-xenpaeUpgrade kernel-sn2Upgrade kernel-s390-debugUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade um-host-install-initrdUpgrade kernel-s390Upgrade kernel-smpUpgrade kernel-umUpgrade kernel-kdumppaeUpgrade kernel-symsUpgrade kernel-kdump | Feb 17, 2015 | Apr 6, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.32-205-doveUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.32-22-lpiaUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-306-ec2Upgrade linux-image-2.6.32-22-powerpcUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-22-386-dbgsymUpgrade linux-image-2.6.32-22-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-22-versatileUpgrade linux-image-2.6.32-22-generic-paeUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-22-powerpc-smpUpgrade linux-image-2.6.32-22-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-22-sparc64-smp-dbgsymUpgrade linux-image-2.6.32-22-powerpc-smp-dbgsymUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.33-501-omapUpgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.32-22-preemptUpgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-22-preempt-dbgsymUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-22-sparc64-smpUpgrade linux-image-2.6.32-22-powerpc-dbgsymUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-22-generic-pae-dbgsymUpgrade linux-image-2.6.32-22-sparc64-dbgsymUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-22-ia64-dbgsymUpgrade linux-image-2.6.32-22-386Upgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.32-22-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-22-versatile-dbgsymUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-22-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-22-generic-dbgsymUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-22-virtualUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-22-server-dbgsymUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-22-ia64Upgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-22-lpia-dbgsymUpgrade linux-image-2.6.32-22-powerpc64-smp-dbgsymUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-802-st1-5Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-powerpc64-smp | Nov 8, 2024 | Apr 6, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Apr 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub