The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-ppc64-baseUpgrade kernel-vanilla-baseUpgrade kernel-rt-develUpgrade kernel-vanilla-develUpgrade kernel-ec2-extraUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-desktop-develUpgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-xen-develUpgrade preload-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-rt_trace-develUpgrade kernel-trace-extraUpgrade kernel-default-baseUpgrade kernel-debug-extraUpgrade iscsitarget-kmp-rtUpgrade preload-kmp-desktopUpgrade kernel-trace-develUpgrade kernel-bigsmpUpgrade kernel-pae-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-ppc64Upgrade kernel-vmiUpgrade kernel-ps3Upgrade kernel-vmipaeUpgrade kernel-debug-baseUpgrade kernel-default-extraUpgrade kernel-desktopUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade brocade-bna-kmp-rtUpgrade kernel-kdumppaeUpgrade kernel-pae-baseUpgrade kernel-ppc64-extraUpgrade kernel-pae-extraUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-xen-extraUpgrade kernel-rt-baseUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-vmi-develUpgrade kernel-smpUpgrade kernel-desktop-baseUpgrade kernel-vmi-baseUpgrade kernel-rt_trace-base | Feb 17, 2015 | Nov 29, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.31-22-lpia | Nov 8, 2024 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub