The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-xen-devel | Dec 1, 2016 | Jul 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 4, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 4, 2013 |
| Suse | — | Upgrade kernel-default-baseUpgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-rt_traceUpgrade kernel-trace-baseUpgrade kernel-pae-baseUpgrade kernel-vanilla-develUpgrade kernel-debugUpgrade kernel-docsUpgrade cluster-network-kmp-traceUpgrade kernel-rt_traceUpgrade ocfs2-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade kernel-trace-develUpgrade kernel-default-extraUpgrade cluster-network-kmp-paeUpgrade kernel-ec2Upgrade kernel-syms-rtUpgrade kernel-pae-develUpgrade kernel-source-vanillaUpgrade cluster-network-kmp-bigsmpUpgrade btrfs-kmp-xenUpgrade kernel-debug-develUpgrade drbd-kmp-rt_traceUpgrade kernel-bigsmp-develUpgrade kernel-traceUpgrade xen-kmp-traceUpgrade kernel-paeUpgrade kernel-bigsmpUpgrade kernel-default-manUpgrade kernel-desktop-baseUpgrade iscsitarget-kmp-rt_traceUpgrade lttng-modules-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-ec2-develUpgrade ocfs2-kmp-rt_traceUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-xen-extraUpgrade hyper-v-kmp-paeUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-rtUpgrade kernel-xenUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-kdumpUpgrade kernel-vmiUpgrade ocfs2-kmp-bigsmpUpgrade xen-kmp-paeUpgrade kernel-bigsmp-baseUpgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-defaultUpgrade kernel-vmipaeUpgrade cluster-network-kmp-defaultUpgrade gfs2-kmp-traceUpgrade kernel-desktop-develUpgrade kernel-pae-extraUpgrade kernel-vanillaUpgrade ext4dev-kmp-defaultUpgrade kernel-rtUpgrade cluster-network-kmp-xenUpgrade gfs2-kmp-paeUpgrade kernel-ppc64-develUpgrade kernel-rt_trace-baseUpgrade ofed-kmp-rtUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-ppc64Upgrade iscsitarget-kmp-rtUpgrade kernel-xen-baseUpgrade kernel-desktopUpgrade kernel-rt-baseUpgrade kernel-xen-develUpgrade kernel-rt-develUpgrade gfs2-kmp-xenUpgrade kernel-ppc64Upgrade lttng-modules-kmp-rtUpgrade hyper-v-kmp-traceUpgrade xen-kmp-defaultUpgrade kernel-trace-extraUpgrade kernel-xenpaeUpgrade gfs2-kmp-bigsmpUpgrade ofed-kmp-rt_traceUpgrade kernel-ec2-baseUpgrade kernel-symsUpgrade kernel-smpUpgrade kernel-ec2-extraUpgrade kernel-rt_trace-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-kdumppaeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-defaultUpgrade kernel-debug-baseUpgrade sle-hae-releaseUpgrade gfs2-kmp-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-develUpgrade btrfs-kmp-default | Feb 17, 2015 | Jul 4, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-233-omap4Upgrade linux-image-3.8.0-32-genericUpgrade linux-image-2.6.32-355-ec2Upgrade linux-image-3.2.0-1439-omap4Upgrade linux-image-3.2.0-55-virtualUpgrade linux-image-3.5.0-41-powerpc64-smpUpgrade linux-image-3.5.0-41-genericUpgrade linux-image-3.5.0-41-omapUpgrade linux-image-2.6.32-50-preemptUpgrade linux-image-2.6.32-50-virtualUpgrade linux-image-3.2.0-55-powerpc-smpUpgrade linux-image-2.6.32-50-genericUpgrade linux-image-2.6.32-50-ia64Upgrade linux-image-2.6.32-50-lpiaUpgrade linux-image-3.2.0-55-generic-paeUpgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-3.2.0-55-highbankUpgrade linux-image-3.5.0-41-highbankUpgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-3.2.0-55-omapUpgrade linux-image-3.2.0-55-genericUpgrade linux-image-2.6.32-50-serverUpgrade linux-image-2.6.32-50-386Upgrade linux-image-3.2.0-55-powerpc64-smpUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-50-versatileUpgrade linux-image-3.5.0-41-powerpc-smpUpgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-2.6.32-50-powerpc64-smp | Nov 8, 2024 | Jul 4, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jul 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub