The ccid3_hc_tx_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade kernel-symsUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-traceUpgrade btrfs-kmp-xenUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade xen-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade ext4dev-kmp-xenUpgrade btrfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade hyper-v-kmp-paeUpgrade kernel-defaultUpgrade kernel-sourceUpgrade ext4dev-kmp-defaultUpgrade kernel-traceUpgrade xen-kmp-paeUpgrade kernel-pae-baseUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-traceUpgrade btrfs-kmp-paeUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-paeUpgrade kernel-default-man | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-3.2.0-32-omapUpgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-3.0.0-28-omapUpgrade linux-image-3.2.0-32-highbankUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.2.0-32-genericUpgrade linux-image-3.2.0-32-virtualUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-3.0.0-28-powerpc | Nov 8, 2024 | Mar 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub