The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xen-develUpgrade perfUpgrade kernelUpgrade kernel-firmware | Dec 1, 2016 | Mar 15, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 14, 2013 |
| Suse | — | Upgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade btrfs-kmp-xenUpgrade xen-kmp-paeUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade btrfs-kmp-paeUpgrade kernel-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-symsUpgrade kernel-default-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-manUpgrade hyper-v-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-ec2-develUpgrade hyper-v-kmp-paeUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade hyper-v-kmp-traceUpgrade kernel-pae-develUpgrade xen-kmp-traceUpgrade kernel-xenUpgrade ext4dev-kmp-traceUpgrade kernel-ec2Upgrade btrfs-kmp-default | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-31-generic-paeUpgrade linux-image-2.6.32-45-sparc64Upgrade linux-image-2.6.32-45-ia64Upgrade linux-image-3.0.0-25-powerpc64-smpUpgrade linux-image-3.2.0-31-genericUpgrade linux-image-2.6.32-45-powerpcUpgrade linux-image-2.6.32-45-preemptUpgrade linux-image-2.6.32-45-serverUpgrade linux-image-2.6.32-45-versatileUpgrade linux-image-2.6.32-45-powerpc64-smpUpgrade linux-image-2.6.32-45-virtualUpgrade linux-image-3.0.0-25-genericUpgrade linux-image-3.0.0-1215-omap4Upgrade linux-image-3.0.0-25-virtualUpgrade linux-image-3.2.0-31-virtualUpgrade linux-image-3.0.0-25-powerpcUpgrade linux-image-2.6.32-45-genericUpgrade linux-image-2.6.32-45-generic-paeUpgrade linux-image-3.0.0-25-omapUpgrade linux-image-3.2.0-31-powerpc64-smpUpgrade linux-image-3.2.0-1419-omap4Upgrade linux-image-3.0.0-25-serverUpgrade linux-image-2.6.32-350-ec2Upgrade linux-image-3.2.0-31-powerpc-smpUpgrade linux-image-3.0.0-25-generic-paeUpgrade linux-image-3.2.0-31-highbankUpgrade linux-image-2.6.32-45-powerpc-smpUpgrade linux-image-3.2.0-31-omapUpgrade linux-image-3.0.0-25-powerpc-smpUpgrade linux-image-2.6.32-45-386Upgrade linux-image-2.6.32-45-lpiaUpgrade linux-image-2.6.32-45-sparc64-smp | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub