The rfcomm_sock_recvmsg function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernelUpgrade perf | Dec 1, 2016 | Apr 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-ppc64-develUpgrade cluster-network-kmp-rtUpgrade ofed-kmp-rt_traceUpgrade kernel-default-baseUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-pae-extraUpgrade kernel-default-manUpgrade ocfs2-kmp-traceUpgrade xen-kmp-paeUpgrade ocfs2-kmp-paeUpgrade ocfs2-kmp-bigsmpUpgrade hyper-v-kmp-traceUpgrade kernel-ec2-baseUpgrade iscsitarget-kmp-rtUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-ec2-develUpgrade kernel-rt_trace-develUpgrade kernel-ppc64Upgrade kernel-trace-extraUpgrade ext4dev-kmp-traceUpgrade kernel-rt-develUpgrade gfs2-kmp-traceUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-rtUpgrade cluster-network-kmp-bigsmpUpgrade cluster-network-kmp-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade cluster-network-kmp-rt_traceUpgrade gfs2-kmp-ppc64Upgrade gfs2-kmp-bigsmpUpgrade btrfs-kmp-defaultUpgrade ocfs2-kmp-ppc64Upgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade btrfs-kmp-xenUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade xen-kmp-traceUpgrade cluster-network-kmp-paeUpgrade ocfs2-kmp-rt_traceUpgrade kernel-sourceUpgrade kernel-symsUpgrade gfs2-kmp-xenUpgrade ext4dev-kmp-xenUpgrade kernel-bigsmp-develUpgrade drbd-kmp-rtUpgrade kernel-trace-baseUpgrade xen-kmp-defaultUpgrade kernel-paeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-ec2Upgrade kernel-bigsmpUpgrade kernel-pae-baseUpgrade ocfs2-kmp-xenUpgrade cluster-network-kmp-traceUpgrade kernel-xenUpgrade kernel-xen-extraUpgrade kernel-default-develUpgrade lttng-modules-kmp-rtUpgrade kernel-rt_traceUpgrade hyper-v-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade gfs2-kmp-paeUpgrade kernel-trace-develUpgrade kernel-rt-baseUpgrade kernel-bigsmp-baseUpgrade kernel-traceUpgrade btrfs-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade kernel-pae-develUpgrade cluster-network-kmp-defaultUpgrade ofed-kmp-rtUpgrade kernel-source-rtUpgrade sle-hae-releaseUpgrade cluster-network-kmp-xen | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-48-omapUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-386Upgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-48-powerpc-smp | Nov 8, 2024 | Apr 22, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub