The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel-docUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel | Dec 1, 2016 | Mar 15, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 14, 2013 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-xen-extraUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade xen-kmp-defaultUpgrade kernel-ppc64Upgrade hyper-v-kmp-traceUpgrade kernel-pae-extraUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-traceUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade xen-kmp-paeUpgrade kernel-ppc64-develUpgrade btrfs-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade kernel-trace-extraUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade btrfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-ec2Upgrade ext4dev-kmp-paeUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade hyper-v-kmp-defaultUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade hyper-v-kmp-paeUpgrade kernel-default-baseUpgrade kernel-symsUpgrade ext4dev-kmp-defaultUpgrade kernel-trace-develUpgrade xen-kmp-traceUpgrade btrfs-kmp-xenUpgrade kernel-ppc64-base | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-28-omapUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-2.6.32-46-386Upgrade linux-image-3.5.0-223-omap4Upgrade linux-image-3.2.0-41-omapUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-2.6.32-46-preemptUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.2.0-1430-omap4Upgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-46-ia64 | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub