The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUUpgrade kernelUpgrade kernel-largesmp-develUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-largesmpUpgrade kernel-doc | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-ppc64-baseUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-default-manUpgrade kernel-default-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-27-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-27-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.35-24-genericUpgrade linux-image-2.6.35-24-virtualUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-27-generic-paeUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.35-24-powerpcUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.35-24-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.32-27-powerpcUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.32-27-serverUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-27-powerpc-smpUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.32-27-genericUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.35-24-omapUpgrade linux-image-2.6.32-27-lpiaUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-24-generic-paeUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.32-27-sparc64Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.35-24-serverUpgrade linux-image-2.6.32-27-386Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-24-versatileUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-27-virtualUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-27-versatileUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-27-preemptUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.35-24-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.32-311-ec2Upgrade linux-image-2.6.32-27-ia64Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-28-generic | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub