arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 23, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 30, 2010 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade kernel-xen-develUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-trace | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-317-ec2Upgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.35-25-omap | Nov 8, 2024 | Dec 23, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub