The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-headers | Dec 1, 2016 | Mar 15, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 14, 2013 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-symsUpgrade xen-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade kernel-xenUpgrade kernel-paeUpgrade ext4dev-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-sourceUpgrade btrfs-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade kernel-default-develUpgrade kernel-traceUpgrade btrfs-kmp-xenUpgrade kernel-defaultUpgrade kernel-trace-baseUpgrade ext4dev-kmp-paeUpgrade xen-kmp-paeUpgrade kernel-default-baseUpgrade kernel-ec2-develUpgrade ext4dev-kmp-traceUpgrade kernel-trace-develUpgrade kernel-ec2-baseUpgrade btrfs-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade hyper-v-kmp-paeUpgrade hyper-v-kmp-traceUpgrade kernel-pae-devel | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-3.2.0-32-virtualUpgrade linux-image-3.2.0-32-genericUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.2.0-32-generic-paeUpgrade linux-image-3.0.0-28-omapUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.2.0-1420-omap4Upgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.2.0-32-powerpc-smpUpgrade linux-image-3.2.0-32-highbankUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.2.0-32-omapUpgrade linux-image-3.2.0-32-powerpc64-smpUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-2.6.32-46-virtual | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub