The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-smpUpgrade kernelUpgrade kernel-largesmp-develUpgrade kernel-smp-develUpgrade kernel-xenUUpgrade kernel-largesmpUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-doc | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-docsUpgrade kernel-ppc64-develUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-ppc64-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-28-powerpc | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub