The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for IP_VS_SO_GET_TIMEOUT commands, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade kernel-defaultUpgrade btrfs-kmp-xenUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade hyper-v-kmp-defaultUpgrade kernel-ec2-develUpgrade xen-kmp-defaultUpgrade xen-kmp-paeUpgrade ext4dev-kmp-traceUpgrade kernel-paeUpgrade ext4dev-kmp-xenUpgrade kernel-xen-develUpgrade btrfs-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade xen-kmp-traceUpgrade kernel-ec2Upgrade hyper-v-kmp-traceUpgrade kernel-symsUpgrade hyper-v-kmp-paeUpgrade kernel-default-develUpgrade kernel-default-manUpgrade btrfs-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade kernel-xenUpgrade ext4dev-kmp-defaultUpgrade kernel-sourceUpgrade kernel-trace | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-3.0.0-28-omapUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.2.0-32-genericUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.2.0-32-virtualUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-32-omapUpgrade linux-image-2.6.32-46-386Upgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-2.6.32-46-serverUpgrade linux-image-3.2.0-32-highbankUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.0.0-28-server | Nov 8, 2024 | Mar 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub