The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2013 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-xen-baseUpgrade kernel-desktop-develUpgrade kernel-ec2-develUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-desktopUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-desktop-base | Jan 9, 2014 | Mar 15, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-27-genericUpgrade linux-image-3.5.0-27-powerpc64-smpUpgrade linux-image-3.2.0-40-generic-paeUpgrade linux-image-3.5.0-27-highbankUpgrade linux-image-3.2.0-40-highbankUpgrade linux-image-3.2.0-1429-omap4Upgrade linux-image-3.2.0-40-powerpc64-smpUpgrade linux-image-3.2.0-40-genericUpgrade linux-image-3.5.0-27-powerpc-smpUpgrade linux-image-3.5.0-27-omapUpgrade linux-image-3.5.0-222-omap4Upgrade linux-image-3.2.0-40-powerpc-smpUpgrade linux-image-3.2.0-40-omapUpgrade linux-image-3.2.0-40-virtual | Nov 8, 2024 | Mar 15, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub