The hso_get_count function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Sep 30, 2010 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-traceUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-default-extraUpgrade kernel-vanilla-baseUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.35-24-powerpc64-smp | Nov 8, 2024 | Sep 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub