The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The caif_seqpkt_recvmsg function in net/caif/caif_socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-xenUpgrade ocfs2-kmp-rt_traceUpgrade cluster-network-kmp-paeUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-baseUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-ec2-develUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-default-extraUpgrade kernel-trace-develUpgrade kernel-vanillaUpgrade xen-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-traceUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade cluster-network-kmp-xenUpgrade kernel-desktopUpgrade ocfs2-kmp-xenUpgrade kernel-desktop-baseUpgrade kernel-ec2Upgrade cluster-network-kmp-traceUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-develUpgrade drbd-kmp-rt_traceUpgrade kernel-symsUpgrade kernel-debug-develUpgrade drbd-kmp-rtUpgrade kernel-xen-extraUpgrade ofed-kmp-rtUpgrade kernel-paeUpgrade kernel-traceUpgrade kernel-trace-extraUpgrade kernel-vanilla-develUpgrade gfs2-kmp-xenUpgrade sle-hae-releaseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade gfs2-kmp-paeUpgrade kernel-source-vanillaUpgrade kernel-ec2-baseUpgrade kernel-rt_trace-baseUpgrade kernel-syms-rtUpgrade xen-kmp-paeUpgrade gfs2-kmp-ppc64Upgrade ofed-kmp-rt_traceUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-bigsmpUpgrade ocfs2-kmp-paeUpgrade kernel-debug-baseUpgrade kernel-rtUpgrade kernel-defaultUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-bigsmp-develUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-bigsmpUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-ppc64-develUpgrade kernel-docsUpgrade kernel-rt_traceUpgrade kernel-pae-extraUpgrade kernel-ppc64-baseUpgrade cluster-network-kmp-ppc64Upgrade ocfs2-kmp-bigsmpUpgrade kernel-source-rtUpgrade ocfs2-kmp-ppc64Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-traceUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-desktop-develUpgrade lttng-modules-kmp-rtUpgrade kernel-rt-base | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.8.0-22-generic | Nov 8, 2024 | Apr 22, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub