The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 10, 2010 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-ppc64-develUpgrade kernel-trace-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-docsUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-pae | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-24-powerpc-smp | Nov 8, 2024 | Dec 10, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub