The ax25_recvmsg function in net/ax25/af_ax25.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-kdumpUpgrade cluster-network-kmp-bigsmpUpgrade kernel-desktop-develUpgrade hyper-v-kmp-paeUpgrade kernel-bigsmp-baseUpgrade kernel-default-manUpgrade kernel-smpUpgrade gfs2-kmp-bigsmpUpgrade kernel-rt_trace-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade cluster-network-kmp-ppc64Upgrade ext4dev-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-syms-rtUpgrade kernel-ec2-baseUpgrade kernel-pae-extraUpgrade gfs2-kmp-ppc64Upgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade btrfs-kmp-defaultUpgrade lttng-modules-kmp-rtUpgrade ocfs2-kmp-ppc64Upgrade kernel-rtUpgrade ext4dev-kmp-paeUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt_trace-baseUpgrade xen-kmp-paeUpgrade kernel-bigsmp-develUpgrade kernel-debug-baseUpgrade gfs2-kmp-traceUpgrade hyper-v-kmp-traceUpgrade kernel-ppc64-baseUpgrade hyper-v-kmp-defaultUpgrade ocfs2-kmp-paeUpgrade ocfs2-kmp-bigsmpUpgrade kernel-rt_traceUpgrade kernel-ppc64-develUpgrade kernel-docsUpgrade ofed-kmp-rt_traceUpgrade ext4dev-kmp-xenUpgrade kernel-source-vanillaUpgrade kernel-vanilla-develUpgrade ext4dev-kmp-traceUpgrade cluster-network-kmp-defaultUpgrade kernel-pae-develUpgrade kernel-debugUpgrade drbd-kmp-rtUpgrade kernel-vanillaUpgrade btrfs-kmp-paeUpgrade iscsitarget-kmp-rt_traceUpgrade xen-kmp-defaultUpgrade kernel-ec2Upgrade kernel-symsUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-develUpgrade kernel-bigsmpUpgrade kernel-ec2-develUpgrade kernel-default-develUpgrade kernel-vmiUpgrade kernel-ppc64Upgrade kernel-desktopUpgrade cluster-network-kmp-paeUpgrade ofed-kmp-rtUpgrade ocfs2-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade gfs2-kmp-paeUpgrade iscsitarget-kmp-rtUpgrade kernel-default-baseUpgrade cluster-network-kmp-xenUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade ocfs2-kmp-rt_traceUpgrade kernel-trace-extraUpgrade kernel-xen-develUpgrade gfs2-kmp-xenUpgrade kernel-debug-develUpgrade kernel-rt-baseUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade ocfs2-kmp-xenUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-traceUpgrade kernel-rt-develUpgrade kernel-trace-develUpgrade kernel-vmipaeUpgrade kernel-desktop-baseUpgrade btrfs-kmp-xenUpgrade kernel-xenUpgrade kernel-xen-extraUpgrade cluster-network-kmp-rtUpgrade kernel-traceUpgrade kernel-kdumppae | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-386Upgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-powerpc | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub