The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-headers | Dec 1, 2016 | Jul 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 4, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 4, 2013 |
| Suse | — | Upgrade kernel-pae-develUpgrade ext4dev-kmp-defaultUpgrade kernel-rt_trace-develUpgrade gfs2-kmp-bigsmpUpgrade kernel-rt-develUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade lttng-modules-kmp-rtUpgrade kernel-ec2-baseUpgrade kernel-desktop-baseUpgrade ocfs2-kmp-traceUpgrade kernel-ppc64Upgrade btrfs-kmp-defaultUpgrade kernel-xenpaeUpgrade kernel-ec2-develUpgrade cluster-network-kmp-rt_traceUpgrade cluster-network-kmp-defaultUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-bigsmpUpgrade kernel-xen-extraUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-defaultUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-extraUpgrade iscsitarget-kmp-rtUpgrade kernel-bigsmp-develUpgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-paeUpgrade btrfs-kmp-xenUpgrade kernel-kdumppaeUpgrade kernel-docsUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-extraUpgrade ext4dev-kmp-paeUpgrade kernel-pae-extraUpgrade kernel-ec2Upgrade kernel-kdumpUpgrade kernel-ppc64-develUpgrade xen-kmp-paeUpgrade kernel-trace-extraUpgrade kernel-traceUpgrade hyper-v-kmp-paeUpgrade drbd-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-bigsmpUpgrade ext4dev-kmp-traceUpgrade xen-kmp-defaultUpgrade kernel-source-rtUpgrade ocfs2-kmp-xenUpgrade hyper-v-kmp-traceUpgrade kernel-rt_trace-baseUpgrade cluster-network-kmp-rtUpgrade sle-hae-releaseUpgrade ofed-kmp-rt_traceUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade ofed-kmp-rtUpgrade kernel-paeUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-bigsmp-baseUpgrade kernel-xenUpgrade gfs2-kmp-ppc64Upgrade kernel-rt-baseUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-ppc64Upgrade kernel-bigsmpUpgrade hyper-v-kmp-defaultUpgrade kernel-vanilla-develUpgrade gfs2-kmp-traceUpgrade kernel-develUpgrade gfs2-kmp-paeUpgrade btrfs-kmp-paeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-rt_traceUpgrade kernel-smpUpgrade ext4dev-kmp-xenUpgrade kernel-rt_traceUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-defaultUpgrade xen-kmp-traceUpgrade cluster-network-kmp-xenUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-xenUpgrade kernel-vmiUpgrade kernel-sourceUpgrade kernel-desktop-develUpgrade kernel-debug-base | Feb 17, 2015 | Jul 4, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-50-versatileUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-3.8.0-30-genericUpgrade linux-image-3.2.0-53-highbankUpgrade linux-image-3.5.0-40-powerpc64-smpUpgrade linux-image-2.6.32-50-ia64Upgrade linux-image-3.5.0-232-omap4Upgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-2.6.32-50-powerpc64-smpUpgrade linux-image-2.6.32-50-lpiaUpgrade linux-image-3.2.0-1437-omap4Upgrade linux-image-3.2.0-53-genericUpgrade linux-image-2.6.32-50-serverUpgrade linux-image-3.2.0-53-powerpc64-smpUpgrade linux-image-2.6.32-50-386Upgrade linux-image-2.6.32-50-preemptUpgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-3.5.0-40-genericUpgrade linux-image-3.2.0-53-omapUpgrade linux-image-3.2.0-53-virtualUpgrade linux-image-2.6.32-50-genericUpgrade linux-image-2.6.32-355-ec2Upgrade linux-image-3.2.0-53-generic-paeUpgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-2.6.32-50-virtualUpgrade linux-image-3.2.0-53-powerpc-smpUpgrade linux-image-3.5.0-40-omapUpgrade linux-image-3.5.0-40-powerpc-smpUpgrade linux-image-3.5.0-40-highbank | Nov 8, 2024 | Jul 4, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jul 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub