The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Dec 29, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.31-609-imx51Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-generic | Nov 8, 2024 | Dec 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub