The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-docUpgrade python-perf | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade kernel-develUpgrade ocfs2-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-desktop-develUpgrade kernel-debug-develUpgrade kernel-vanilla-develUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-xenUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade kernel-pae-develUpgrade sle-hae-releaseUpgrade kernel-defaultUpgrade xen-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-xenUpgrade kernel-trace-baseUpgrade cluster-network-kmp-ppc64Upgrade ocfs2-kmp-ppc64Upgrade kernel-pae-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade xen-kmp-paeUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-paeUpgrade gfs2-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-paeUpgrade gfs2-kmp-traceUpgrade kernel-ppc64-develUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade kernel-desktopUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-extraUpgrade kernel-xen-develUpgrade kernel-debug-baseUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-pae-baseUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-paeUpgrade kernel-default-extraUpgrade ocfs2-kmp-paeUpgrade kernel-desktop-baseUpgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-ppc64 | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-41-highbankUpgrade linux-image-3.2.0-41-powerpc-smpUpgrade linux-image-3.5.0-223-omap4Upgrade linux-image-3.2.0-41-powerpc64-smpUpgrade linux-image-3.2.0-41-virtualUpgrade linux-image-3.5.0-28-powerpc-smpUpgrade linux-image-3.5.0-28-powerpc64-smpUpgrade linux-image-3.5.0-28-highbankUpgrade linux-image-3.2.0-41-genericUpgrade linux-image-3.2.0-41-omapUpgrade linux-image-3.2.0-41-generic-paeUpgrade linux-image-3.5.0-28-omapUpgrade linux-image-3.5.0-28-genericUpgrade linux-image-3.2.0-1430-omap4 | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub