The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-xen-develUpgrade python-perfUpgrade kernel-docUpgrade kernel-firmwareUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-PAE-devel | Dec 1, 2016 | Oct 3, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 3, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Oct 3, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2012 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-default-develUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64Upgrade kernel-default-manUpgrade kernel-trace-extraUpgrade btrfs-kmp-xenUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-xen-develUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade kernel-xen-extraUpgrade kernel-xen-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-ec2Upgrade xen-kmp-traceUpgrade kernel-trace-baseUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-develUpgrade btrfs-kmp-paeUpgrade kernel-bigmem-develUpgrade xen-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-pae-extraUpgrade kernel-bigmem-baseUpgrade kernel-defaultUpgrade hyper-v-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-traceUpgrade kernel-bigmemUpgrade xen-kmp-paeUpgrade kernel-docsUpgrade hyper-v-kmp-pae | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-43-genericUpgrade linux-image-2.6.38-16-generic-paeUpgrade linux-image-2.6.32-43-powerpcUpgrade linux-image-2.6.32-43-lpiaUpgrade linux-image-2.6.32-43-versatileUpgrade linux-image-3.2.0-31-genericUpgrade linux-image-2.6.38-16-genericUpgrade linux-image-2.6.38-16-powerpc64-smpUpgrade linux-image-3.0.0-26-powerpc-smpUpgrade linux-image-3.2.0-31-highbankUpgrade linux-image-3.2.0-1419-omap4Upgrade linux-image-2.6.32-43-sparc64Upgrade linux-image-2.6.32-43-ia64Upgrade linux-image-2.6.32-43-386Upgrade linux-image-2.6.32-43-preemptUpgrade linux-image-3.0.0-26-omapUpgrade linux-image-2.6.32-43-generic-paeUpgrade linux-image-3.0.0-26-powerpcUpgrade linux-image-2.6.38-16-virtualUpgrade linux-image-2.6.32-43-virtualUpgrade linux-image-2.6.38-16-powerpcUpgrade linux-image-3.2.0-31-powerpc64-smpUpgrade linux-image-3.0.0-26-serverUpgrade linux-image-3.2.0-31-powerpc-smpUpgrade linux-image-3.0.0-1216-omap4Upgrade linux-image-2.6.32-43-sparc64-smpUpgrade linux-image-2.6.32-43-powerpc-smpUpgrade linux-image-2.6.38-16-omapUpgrade linux-image-2.6.38-16-versatileUpgrade linux-image-2.6.38-16-serverUpgrade linux-image-3.0.0-26-genericUpgrade linux-image-3.2.0-31-omapUpgrade linux-image-2.6.32-43-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-16-powerpc-smpUpgrade linux-image-3.0.0-26-powerpc64-smpUpgrade linux-image-3.2.0-31-generic-paeUpgrade linux-image-3.0.0-26-virtualUpgrade linux-image-3.2.0-31-virtualUpgrade linux-image-3.0.0-26-generic-paeUpgrade linux-image-2.6.32-348-ec2Upgrade linux-image-2.6.32-43-powerpc64-smp | Nov 8, 2024 | Oct 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub