The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-docUpgrade python-perfUpgrade perf | Dec 1, 2016 | Feb 17, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Feb 18, 2013 |
| Suse | — | Upgrade kernel-default-manUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-paeUpgrade kernel-ec2Upgrade xen-kmp-traceUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade btrfs-kmp-xenUpgrade kernel-traceUpgrade kernel-paeUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-trace-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-xen-extraUpgrade kernel-pae-baseUpgrade kernel-ppc64-baseUpgrade xen-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ppc64-develUpgrade ext4dev-kmp-traceUpgrade kernel-trace-extraUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade btrfs-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-pae-extraUpgrade hyper-v-kmp-traceUpgrade xen-kmp-defaultUpgrade kernel-xen-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-45-versatileUpgrade linux-image-2.6.32-350-ec2Upgrade linux-image-3.2.0-36-omapUpgrade linux-image-3.2.0-1424-omap4Upgrade linux-image-3.0.0-30-omapUpgrade linux-image-2.6.32-45-sparc64Upgrade linux-image-2.6.32-45-serverUpgrade linux-image-2.6.32-45-preemptUpgrade linux-image-2.6.32-45-ia64Upgrade linux-image-2.6.32-45-virtualUpgrade linux-image-2.6.32-45-powerpc64-smpUpgrade linux-image-3.2.0-36-powerpc-smpUpgrade linux-image-3.0.0-30-genericUpgrade linux-image-3.0.0-30-powerpc-smpUpgrade linux-image-2.6.32-45-lpiaUpgrade linux-image-3.0.0-1220-omap4Upgrade linux-image-3.2.0-36-genericUpgrade linux-image-3.5.0-22-genericUpgrade linux-image-3.0.0-30-generic-paeUpgrade linux-image-2.6.32-45-powerpc-smpUpgrade linux-image-3.0.0-30-powerpc64-smpUpgrade linux-image-3.5.0-22-omapUpgrade linux-image-3.2.0-36-generic-paeUpgrade linux-image-3.0.0-30-serverUpgrade linux-image-3.0.0-30-powerpcUpgrade linux-image-2.6.32-45-386Upgrade linux-image-3.5.0-22-powerpc64-smpUpgrade linux-image-2.6.32-45-genericUpgrade linux-image-3.5.0-22-powerpc-smpUpgrade linux-image-2.6.32-45-powerpcUpgrade linux-image-2.6.32-45-generic-paeUpgrade linux-image-3.5.0-217-omap4Upgrade linux-image-3.2.0-36-powerpc64-smpUpgrade linux-image-3.2.0-36-highbankUpgrade linux-image-2.6.32-45-sparc64-smpUpgrade linux-image-3.0.0-30-virtualUpgrade linux-image-3.2.0-36-virtualUpgrade linux-image-3.5.0-22-highbank | Nov 8, 2024 | Feb 18, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub