The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-defaultUpgrade gfs2-kmp-traceUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-ppc64Upgrade kernel-default-extraUpgrade kernel-rt_trace-develUpgrade kernel-syms-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-ec2-extraUpgrade kernel-xen-baseUpgrade ocfs2-kmp-traceUpgrade kernel-pae-baseUpgrade kernel-rt-develUpgrade ocfs2-kmp-bigsmpUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-bigsmpUpgrade kernel-develUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade iscsitarget-kmp-rt_traceUpgrade cluster-network-kmp-bigsmpUpgrade kernel-trace-extraUpgrade kernel-ppc64-develUpgrade kernel-vanillaUpgrade cluster-network-kmp-rtUpgrade kernel-desktopUpgrade kernel-desktop-develUpgrade ofed-kmp-rtUpgrade xen-kmp-paeUpgrade kernel-rt_trace-baseUpgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade ofed-kmp-rt_traceUpgrade kernel-docsUpgrade cluster-network-kmp-xenUpgrade kernel-rtUpgrade kernel-xen-develUpgrade kernel-desktop-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade iscsitarget-kmp-rtUpgrade kernel-ppc64Upgrade kernel-debug-baseUpgrade kernel-pae-extraUpgrade kernel-traceUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-vanilla-develUpgrade kernel-xen-extraUpgrade cluster-network-kmp-paeUpgrade sle-hae-releaseUpgrade kernel-ec2Upgrade kernel-paeUpgrade ocfs2-kmp-rt_traceUpgrade kernel-source-rtUpgrade kernel-trace-baseUpgrade kernel-bigsmpUpgrade kernel-debugUpgrade xen-kmp-traceUpgrade ocfs2-kmp-xenUpgrade ocfs2-kmp-rtUpgrade lttng-modules-kmp-rtUpgrade kernel-rt_traceUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-paeUpgrade kernel-sourceUpgrade xen-kmp-defaultUpgrade kernel-pae-develUpgrade drbd-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-trace-develUpgrade kernel-bigsmp-baseUpgrade kernel-rt-baseUpgrade lttng-modules-kmp-rt_traceUpgrade ocfs2-kmp-paeUpgrade kernel-bigsmp-develUpgrade kernel-debug-develUpgrade kernel-default-man | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-52-powerpc64-smpUpgrade linux-image-3.5.0-39-powerpc-smpUpgrade linux-image-3.5.0-39-powerpc64-smpUpgrade linux-image-3.5.0-39-omapUpgrade linux-image-3.2.0-1436-omap4Upgrade linux-image-3.5.0-231-omap4Upgrade linux-image-3.5.0-39-highbankUpgrade linux-image-3.2.0-52-generic-paeUpgrade linux-image-3.2.0-52-genericUpgrade linux-image-3.2.0-52-highbankUpgrade linux-image-3.2.0-52-omapUpgrade linux-image-3.8.0-29-genericUpgrade linux-image-3.5.0-39-genericUpgrade linux-image-3.2.0-52-virtualUpgrade linux-image-3.2.0-52-powerpc-smp | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub