kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a netlink socket, as demonstrated by discovering the length of another user's password.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen | Dec 1, 2016 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 13, 2012 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-trace-extraUpgrade xen-kmp-traceUpgrade kernel-xen-extraUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-ppc64-develUpgrade kernel-ec2Upgrade kernel-default-develUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade xen-kmp-defaultUpgrade kernel-docsUpgrade kernel-pae-extraUpgrade kernel-ec2-develUpgrade xen-kmp-paeUpgrade kernel-defaultUpgrade kernel-trace-baseUpgrade kernel-ec2-baseUpgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade kernel-pae-develUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-trace-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-3.0.0-13-omapUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-3.0.0-13-genericUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-3.0.0-13-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-3.0.0-13-serverUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.32-219-doveUpgrade linux-image-3.0.0-13-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-3.0.0-13-generic-paeUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-3.0.0-13-powerpc-smpUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-3.0.0-13-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.24-29-hppa64 | Nov 8, 2024 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub