The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 10, 2010 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-ppc64Upgrade kernel-traceUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade kernel-sourceUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade kernel-xen-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.35-24-powerpc-smp | Nov 8, 2024 | Dec 10, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub