The irda_recvmsg_dgram function in net/irda/af_irda.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-rtUpgrade ext4dev-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade kernel-xenpaeUpgrade kernel-ppc64-develUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-desktopUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade ocfs2-kmp-bigsmpUpgrade ofed-kmp-rt_traceUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-traceUpgrade btrfs-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-default-extraUpgrade ext4dev-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade hyper-v-kmp-traceUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-rt_trace-develUpgrade kernel-kdumppaeUpgrade kernel-vanillaUpgrade cluster-network-kmp-bigsmpUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-traceUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-xenUpgrade gfs2-kmp-bigsmpUpgrade ocfs2-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-ec2-baseUpgrade kernel-rt-develUpgrade kernel-pae-baseUpgrade cluster-network-kmp-xenUpgrade kernel-desktop-develUpgrade xen-kmp-defaultUpgrade kernel-sourceUpgrade kernel-trace-extraUpgrade kernel-xen-develUpgrade cluster-network-kmp-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-pae-extraUpgrade kernel-xen-baseUpgrade kernel-develUpgrade kernel-vmipaeUpgrade xen-kmp-paeUpgrade cluster-network-kmp-ppc64Upgrade lttng-modules-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-rt_traceUpgrade gfs2-kmp-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-bigsmp-develUpgrade cluster-network-kmp-traceUpgrade kernel-debug-develUpgrade drbd-kmp-rt_traceUpgrade kernel-default-baseUpgrade kernel-rt_traceUpgrade btrfs-kmp-xenUpgrade sle-hae-releaseUpgrade kernel-desktop-baseUpgrade cluster-network-kmp-paeUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-paeUpgrade kernel-traceUpgrade kernel-bigsmpUpgrade kernel-default-manUpgrade kernel-kdumpUpgrade kernel-pae-develUpgrade hyper-v-kmp-paeUpgrade kernel-xen-extraUpgrade xen-kmp-traceUpgrade ocfs2-kmp-xenUpgrade ext4dev-kmp-paeUpgrade ocfs2-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-trace-baseUpgrade gfs2-kmp-paeUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-network-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-paeUpgrade drbd-kmp-rtUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-ec2Upgrade kernel-vmi | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-48-omapUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-generic-pae | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub