The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-xenU-develUpgrade kernel-develUpgrade kernelUpgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-largesmpUpgrade kernel-largesmp-develUpgrade kernel-xenU | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-pae-baseUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-default-man | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-28-powerpc | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub