The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Mar 14, 2013 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-xenUpgrade xen-kmp-paeUpgrade ext4dev-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-xen-extraUpgrade btrfs-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-default-develUpgrade btrfs-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-ppc64-develUpgrade kernel-traceUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-traceUpgrade ext4dev-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-ec2-develUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade kernel-pae-baseUpgrade ext4dev-kmp-traceUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-pae-extraUpgrade btrfs-kmp-paeUpgrade kernel-default-man | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-47-sparc64Upgrade linux-image-2.6.32-47-generic-paeUpgrade linux-image-2.6.32-47-lpiaUpgrade linux-image-2.6.32-47-versatileUpgrade linux-image-2.6.32-47-powerpcUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-2.6.32-47-powerpc64-smpUpgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-2.6.32-47-ia64Upgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-2.6.32-47-genericUpgrade linux-image-2.6.32-47-preemptUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-2.6.32-47-sparc64-smpUpgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-2.6.32-352-ec2Upgrade linux-image-3.2.0-41-omapUpgrade linux-image-2.6.32-47-virtualUpgrade linux-image-2.6.32-47-386Upgrade linux-image-2.6.32-47-serverUpgrade linux-image-3.2.0-1430-omap4Upgrade linux-image-2.6.32-47-powerpc-smpUpgrade linux-image-3.5.0-223-omap4 | Nov 8, 2024 | Mar 15, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub