The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 30, 2010 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-paeUpgrade kernel-traceUpgrade kernel-pae-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-trace-baseUpgrade kernel-vmiUpgrade kernel-default-manUpgrade ext4dev-kmp-ppc64Upgrade kernel-kdumpUpgrade kernel-trace-develUpgrade ext4dev-kmp-paeUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64Upgrade kernel-develUpgrade ext4dev-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade oracleasm-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-docsUpgrade iscsitarget-kmp-defaultUpgrade kernel-ppc64-develUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-vanilla-baseUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-source | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-27-virtual | Nov 8, 2024 | Sep 30, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Sep 30, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub