The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAEUpgrade perfUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-PAE-develUpgrade python-perfUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-xen-develUpgrade kernel | Dec 1, 2016 | Jul 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 4, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 4, 2013 |
| Suse | — | Upgrade cluster-network-kmp-bigsmpUpgrade ocfs2-kmp-rtUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-debugUpgrade btrfs-kmp-paeUpgrade kernel-traceUpgrade kernel-bigsmp-develUpgrade kernel-default-extraUpgrade kernel-vanilla-develUpgrade cluster-network-kmp-rt_traceUpgrade kernel-syms-rtUpgrade cluster-network-kmp-ppc64Upgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-paeUpgrade ocfs2-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-ec2-develUpgrade kernel-vmiUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-xenUpgrade kernel-rt_traceUpgrade kernel-xen-extraUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-desktop-baseUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade cluster-network-kmp-traceUpgrade btrfs-kmp-xenUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-rt_traceUpgrade kernel-source-rtUpgrade lttng-modules-kmp-rt_traceUpgrade ocfs2-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade drbd-kmp-rt_traceUpgrade kernel-default-baseUpgrade hyper-v-kmp-paeUpgrade cluster-network-kmp-rtUpgrade drbd-kmp-rtUpgrade xen-kmp-traceUpgrade kernel-rt_trace-baseUpgrade kernel-rtUpgrade sle-hae-releaseUpgrade cluster-network-kmp-xenUpgrade ofed-kmp-rtUpgrade kernel-ec2-extraUpgrade kernel-rt-develUpgrade kernel-xen-develUpgrade xen-kmp-paeUpgrade gfs2-kmp-defaultUpgrade kernel-xen-baseUpgrade cluster-network-kmp-defaultUpgrade kernel-vmipaeUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-xenUpgrade btrfs-kmp-defaultUpgrade kernel-debug-baseUpgrade ocfs2-kmp-bigsmpUpgrade kernel-pae-extraUpgrade hyper-v-kmp-traceUpgrade kernel-desktopUpgrade kernel-vanillaUpgrade ocfs2-kmp-ppc64Upgrade iscsitarget-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-desktop-develUpgrade kernel-trace-extraUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-traceUpgrade kernel-smpUpgrade kernel-develUpgrade kernel-kdumppaeUpgrade kernel-defaultUpgrade ext4dev-kmp-defaultUpgrade lttng-modules-kmp-rtUpgrade gfs2-kmp-xenUpgrade ext4dev-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-bigsmpUpgrade kernel-ppc64Upgrade kernel-ec2-baseUpgrade kernel-bigsmp-baseUpgrade kernel-sourceUpgrade gfs2-kmp-ppc64Upgrade ofed-kmp-rt_traceUpgrade xen-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade kernel-rt_trace-develUpgrade kernel-xenpae | Feb 17, 2015 | Jul 4, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-50-genericUpgrade linux-image-2.6.32-50-preemptUpgrade linux-image-2.6.32-355-ec2Upgrade linux-image-3.2.0-55-virtualUpgrade linux-image-3.2.0-1439-omap4Upgrade linux-image-3.8.0-32-genericUpgrade linux-image-3.5.0-41-powerpc64-smpUpgrade linux-image-3.5.0-41-omapUpgrade linux-image-2.6.32-50-virtualUpgrade linux-image-3.5.0-233-omap4Upgrade linux-image-2.6.32-50-ia64Upgrade linux-image-3.2.0-55-generic-paeUpgrade linux-image-3.2.0-55-powerpc-smpUpgrade linux-image-2.6.32-50-lpiaUpgrade linux-image-3.5.0-41-genericUpgrade linux-image-2.6.32-50-versatileUpgrade linux-image-2.6.32-50-sparc64Upgrade linux-image-3.2.0-55-powerpc64-smpUpgrade linux-image-2.6.32-50-powerpc-smpUpgrade linux-image-2.6.32-50-serverUpgrade linux-image-2.6.32-50-generic-paeUpgrade linux-image-3.5.0-41-powerpc-smpUpgrade linux-image-3.2.0-55-genericUpgrade linux-image-2.6.32-50-powerpcUpgrade linux-image-2.6.32-50-powerpc64-smpUpgrade linux-image-2.6.32-50-386Upgrade linux-image-3.2.0-55-omapUpgrade linux-image-3.5.0-41-highbankUpgrade linux-image-2.6.32-50-sparc64-smpUpgrade linux-image-3.2.0-55-highbank | Nov 8, 2024 | Jul 4, 2013 |
| Vmsa 2013 0015 | — | Upgrade VMware ESX 4.1 to build number 1363503 | Dec 18, 2013 | Jul 4, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub