The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-sourceUpgrade hyper-v-kmp-traceUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade btrfs-kmp-paeUpgrade kernel-traceUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade kernel-xen-baseUpgrade hyper-v-kmp-paeUpgrade kernel-xenUpgrade xen-kmp-traceUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade ext4dev-kmp-xenUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade hyper-v-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade btrfs-kmp-defaultUpgrade kernel-pae-develUpgrade xen-kmp-defaultUpgrade btrfs-kmp-xenUpgrade xen-kmp-pae | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.2.0-32-omapUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.2.0-32-highbankUpgrade linux-image-3.2.0-32-genericUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-3.0.0-28-omapUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-3.2.0-32-virtualUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.0.0-28-powerpc | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub