The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade cluster-network-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade brocade-bna-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-rt_traceUpgrade drbd-kmp-rtUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-baseUpgrade ofed-kmp-rtUpgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rt_trace-develUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-devel | Nov 18, 2015 | Nov 29, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-server | Nov 8, 2024 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub