The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 8, 2010 |
| Suse | — | Upgrade kernel-develUpgrade kernel-traceUpgrade kernel-sourceUpgrade oracleasm-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-symsUpgrade iscsitarget-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-xen-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-vmiUpgrade ext4dev-kmp-xenUpgrade kernel-xen-develUpgrade kernel-kdumpUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade ext4dev-kmp-vmiUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-trace-develUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-trace-baseUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade ext4dev-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-xenUpgrade kernel-pae | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-26-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-26-powerpcUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-23-generic-paeUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-23-omapUpgrade linux-image-2.6.32-26-powerpc64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-23-powerpcUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.35-23-powerpc-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-26-386Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-26-preemptUpgrade linux-image-2.6.32-26-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-26-versatileUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-26-powerpc-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-23-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-26-sparc64-smpUpgrade linux-image-2.6.35-23-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-310-ec2Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-23-powerpc64-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.32-26-generic-paeUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-26-sparc64Upgrade linux-image-2.6.35-23-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-26-serverUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-26-ia64Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-26-virtualUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-23-serverUpgrade linux-image-2.6.24-28-lpia | Nov 8, 2024 | Sep 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub