The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-headers | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-defaultUpgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-default-man | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-generic | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub