fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 13, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 21, 2011 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-ppc64-develUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-pae | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.32-35-serverUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-319-ec2 | Nov 8, 2024 | Jun 13, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub