The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for IP_VS_SO_GET_TIMEOUT commands, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-ec2-baseUpgrade hyper-v-kmp-paeUpgrade btrfs-kmp-paeUpgrade kernel-xenUpgrade kernel-symsUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade btrfs-kmp-xenUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade xen-kmp-paeUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade ext4dev-kmp-traceUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-trace | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.2.0-32-virtualUpgrade linux-image-3.2.0-32-omapUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.0.0-28-omapUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-32-genericUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.2.0-32-highbankUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-3.0.0-28-virtual | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub