arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 23, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 30, 2010 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-trace | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-28-386 | Nov 8, 2024 | Dec 23, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub