The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call, related to the hash_recvmsg function in crypto/algif_hash.c and the skcipher_recvmsg function in crypto/algif_skcipher.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade perf | Feb 15, 2019 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-traceUpgrade kernel-rt_trace-develUpgrade kernel-xen-extraUpgrade kernel-sourceUpgrade kernel-ec2Upgrade ocfs2-kmp-paeUpgrade kernel-bigsmpUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade ocfs2-kmp-rt_traceUpgrade xen-kmp-traceUpgrade kernel-syms-rtUpgrade kernel-rt_traceUpgrade lttng-modules-kmp-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-xenUpgrade kernel-bigsmp-develUpgrade cluster-network-kmp-defaultUpgrade kernel-paeUpgrade kernel-default-manUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rtUpgrade kernel-pae-extraUpgrade kernel-pae-baseUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-xenUpgrade kernel-trace-develUpgrade gfs2-kmp-paeUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade ofed-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade drbd-kmp-rtUpgrade kernel-xen-develUpgrade kernel-rt-baseUpgrade kernel-xen-baseUpgrade kernel-source-rtUpgrade lttng-modules-kmp-rt_traceUpgrade ofed-kmp-rt_traceUpgrade cluster-network-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-traceUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade sle-hae-releaseUpgrade kernel-rt-develUpgrade cluster-network-kmp-bigsmpUpgrade kernel-ppc64Upgrade cluster-network-kmp-rtUpgrade gfs2-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-bigsmp-baseUpgrade kernel-default-baseUpgrade xen-kmp-paeUpgrade cluster-network-kmp-xenUpgrade gfs2-kmp-bigsmpUpgrade iscsitarget-kmp-rtUpgrade kernel-ppc64-develUpgrade cluster-network-kmp-ppc64Upgrade ocfs2-kmp-ppc64Upgrade ocfs2-kmp-bigsmp | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.5.0-34-highbank | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub