fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-xen | Dec 1, 2016 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 13, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 21, 2011 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-debug-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-traceUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-xen-baseUpgrade drbd-kmp-rtUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-symsUpgrade kernel-desktopUpgrade drbd-kmp-rt_traceUpgrade kernel-xenUpgrade kernel-rt-baseUpgrade kernel-ec2-develUpgrade kernel-vmi-develUpgrade brocade-bna-kmp-rtUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-vmiUpgrade kernel-vanillaUpgrade ocfs2-kmp-rt_traceUpgrade kernel-rt-develUpgrade kernel-desktop-baseUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-source-rtUpgrade kernel-desktop-develUpgrade preload-kmp-defaultUpgrade kernel-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-pae-develUpgrade kernel-source-vanillaUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade preload-kmp-desktopUpgrade cluster-network-kmp-rtUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-rt_trace-develUpgrade kernel-default-baseUpgrade kernel-vmi-baseUpgrade kernel-rt_trace-baseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-ec2-baseUpgrade kernel-trace-base | Feb 17, 2015 | Jun 13, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-powerpc-smp | Nov 8, 2024 | Jun 13, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub