The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 3, 2011 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-xenUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-syms | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.32-29-generic-paeUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-29-ia64Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-29-lpiaUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-29-genericUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.32-29-serverUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-29-sparc64-smpUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.32-29-powerpcUpgrade linux-image-2.6.32-29-preemptUpgrade linux-image-2.6.32-29-powerpc64-smpUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-29-powerpc-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-29-386Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-29-virtualUpgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-313-ec2Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.32-29-versatileUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-29-sparc64Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.35-30-virtual | Nov 8, 2024 | Jan 3, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Jan 3, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub