The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
CVSS Details
- CVSS 3.1 Base Score: 7.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-PAEUpgrade kernelUpgrade perfUpgrade kernel-PAE-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-pae-develUpgrade btrfs-kmp-defaultUpgrade kernel-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-pae-extraUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-trace-baseUpgrade kernel-desktop-develUpgrade kernel-trace-develUpgrade kernel-ec2-baseUpgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-sourceUpgrade btrfs-kmp-xenUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64-develUpgrade kernel-xen-extra | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-generic-pae | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub