The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-desktop-develUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-ec2Upgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-vanillaUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-desktop-baseUpgrade kernel-desktopUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-ec2-baseUpgrade kernel-traceUpgrade kernel-source | Jan 9, 2014 | Mar 15, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-40-highbankUpgrade linux-image-3.5.0-27-highbankUpgrade linux-image-3.2.0-40-virtualUpgrade linux-image-3.2.0-40-omapUpgrade linux-image-3.2.0-1429-omap4Upgrade linux-image-3.5.0-27-genericUpgrade linux-image-3.5.0-222-omap4Upgrade linux-image-3.2.0-40-powerpc64-smpUpgrade linux-image-3.2.0-40-genericUpgrade linux-image-3.5.0-27-powerpc-smpUpgrade linux-image-3.5.0-27-omapUpgrade linux-image-3.2.0-40-generic-paeUpgrade linux-image-3.2.0-40-powerpc-smpUpgrade linux-image-3.5.0-27-powerpc64-smp | Nov 8, 2024 | Mar 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub