The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 30, 2010 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-ppc64-develUpgrade kernel-default-extraUpgrade kernel-vanilla-baseUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-docsUpgrade ext4dev-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-develUpgrade iscsitarget-kmp-defaultUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade ext4dev-kmp-vmiUpgrade kernel-zfcpdumpUpgrade ext4dev-kmp-ppc64Upgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-traceUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-paeUpgrade kernel-obs-buildUpgrade kernel-vmiUpgrade kernel-default-baseUpgrade kernel-kdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-macrosUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-sparc64 | Nov 8, 2024 | Sep 30, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Sep 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub