The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-27-generic-paeUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.35-27-powerpc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.35-27-powerpcUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.35-27-omapUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.35-27-genericUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.35-27-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-27-versatileUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.35-27-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-27-virtualUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.35-25-versatileUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-28-preempt | Nov 8, 2024 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub