The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 21, 2012 |
| Suse | — | Upgrade kernel-xen-extraUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-trace-extraUpgrade kernel-paeUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-xen-develUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade xen-kmp-traceUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-xen-baseUpgrade kernel-trace-develUpgrade xen-kmp-paeUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade xen-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-ppc64Upgrade kernel-pae-extraUpgrade kernel-ppc64-baseUpgrade kernel-default-baseUpgrade kernel-ec2-baseUpgrade kernel-trace-base | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-28-virtualUpgrade linux-image-3.5.0-19-genericUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-3.2.0-34-virtualUpgrade linux-image-3.2.0-34-generic-paeUpgrade linux-image-3.5.0-19-omapUpgrade linux-image-3.5.0-19-powerpc64-smpUpgrade linux-image-3.2.0-34-omapUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.2.0-34-highbankUpgrade linux-image-3.5.0-19-highbankUpgrade linux-image-3.2.0-1422-omap4Upgrade linux-image-3.5.0-19-powerpc-smpUpgrade linux-image-3.2.0-34-powerpc64-smpUpgrade linux-image-3.2.0-34-powerpc-smpUpgrade linux-image-3.5.0-215-omap4Upgrade linux-image-3.2.0-34-genericUpgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.0.0-28-omapUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-3.0.0-28-powerpc-smp | Nov 8, 2024 | Dec 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub