The caif_seqpkt_recvmsg function in net/caif/caif_socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade xen-kmp-traceUpgrade kernel-rt_trace-develUpgrade gfs2-kmp-bigsmpUpgrade gfs2-kmp-ppc64Upgrade kernel-xen-develUpgrade kernel-trace-extraUpgrade cluster-network-kmp-traceUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade xen-kmp-defaultUpgrade kernel-trace-baseUpgrade ocfs2-kmp-traceUpgrade kernel-debugUpgrade kernel-ec2Upgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-ppc64Upgrade kernel-develUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade drbd-kmp-rt_traceUpgrade kernel-desktopUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade ofed-kmp-rtUpgrade cluster-network-kmp-xenUpgrade kernel-xen-extraUpgrade ocfs2-kmp-xenUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-xen-baseUpgrade cluster-network-kmp-paeUpgrade lttng-modules-kmp-rt_traceUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-rt_traceUpgrade kernel-bigsmpUpgrade kernel-desktop-baseUpgrade ocfs2-kmp-paeUpgrade kernel-vanilla-develUpgrade kernel-ppc64-develUpgrade sle-hae-releaseUpgrade cluster-network-kmp-bigsmpUpgrade kernel-rt_traceUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-trace | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.2.0-48-highbank | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub