The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-ppc64-develUpgrade kernel-trace-baseUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.31-23-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.31-23-sparc64Upgrade linux-image-2.6.31-23-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-23-powerpc64-smpUpgrade linux-image-2.6.31-23-powerpc-smpUpgrade linux-image-2.6.31-23-sparc64-smpUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.31-308-ec2Upgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.31-23-powerpcUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.31-23-lpiaUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.31-23-genericUpgrade linux-image-2.6.31-23-ia64Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.31-23-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.31-23-386Upgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-powerpc-smp | Nov 8, 2024 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub