The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-docUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade kernel-ec2Upgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-vmipaeUpgrade kernel-pae-baseUpgrade ext4dev-kmp-paeUpgrade hyper-v-kmp-paeUpgrade kernel-kdumppaeUpgrade btrfs-kmp-xenUpgrade kernel-trace-develUpgrade kernel-xenpaeUpgrade hyper-v-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-bigsmpUpgrade xen-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-xenUpgrade xen-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-traceUpgrade xen-kmp-paeUpgrade btrfs-kmp-paeUpgrade kernel-vmiUpgrade kernel-smpUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-traceUpgrade kernel-default-develUpgrade kernel-kdumpUpgrade kernel-sourceUpgrade ext4dev-kmp-xenUpgrade kernel-trace-baseUpgrade kernel-pae | Jan 12, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-358-ec2Upgrade linux-image-2.6.32-53-386Upgrade linux-image-3.5.0-42-omapUpgrade linux-image-3.8.0-33-genericUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-56-powerpc64-smpUpgrade linux-image-3.2.0-1440-omap4Upgrade linux-image-2.6.32-53-lpiaUpgrade linux-image-3.5.0-42-powerpc64-smpUpgrade linux-image-2.6.32-53-ia64Upgrade linux-image-2.6.32-53-preemptUpgrade linux-image-3.5.0-42-genericUpgrade linux-image-2.6.32-53-sparc64-smpUpgrade linux-image-3.2.0-56-genericUpgrade linux-image-2.6.32-53-versatileUpgrade linux-image-2.6.32-53-virtualUpgrade linux-image-3.2.0-56-powerpc-smpUpgrade linux-image-2.6.32-53-serverUpgrade linux-image-2.6.32-53-powerpc-smpUpgrade linux-image-2.6.32-53-generic-paeUpgrade linux-image-3.2.0-56-generic-paeUpgrade linux-image-3.5.0-42-powerpc-smpUpgrade linux-image-2.6.32-53-genericUpgrade linux-image-3.2.0-56-highbankUpgrade linux-image-2.6.32-53-powerpc64-smpUpgrade linux-image-3.2.0-56-omapUpgrade linux-image-3.2.0-56-virtualUpgrade linux-image-3.5.0-42-highbankUpgrade linux-image-3.5.0-234-omap4Upgrade linux-image-2.6.32-53-powerpcUpgrade linux-image-2.6.32-53-sparc64 | Nov 8, 2024 | Jun 7, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub