The iucv_sock_recvmsg function in net/iucv/af_iucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade ocfs2-kmp-traceUpgrade kernel-docsUpgrade hyper-v-kmp-paeUpgrade kernel-ec2-develUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-desktop-baseUpgrade kernel-ec2Upgrade kernel-paeUpgrade kernel-ppc64-baseUpgrade xen-kmp-paeUpgrade cluster-network-kmp-rt_traceUpgrade kernel-symsUpgrade kernel-debugUpgrade cluster-network-kmp-ppc64Upgrade kernel-default-extraUpgrade ofed-kmp-rt_traceUpgrade kernel-pae-baseUpgrade cluster-network-kmp-rtUpgrade kernel-default-develUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-baseUpgrade hyper-v-kmp-defaultUpgrade kernel-default-manUpgrade kernel-xen-extraUpgrade ocfs2-kmp-rt_traceUpgrade kernel-desktopUpgrade btrfs-kmp-xenUpgrade ocfs2-kmp-paeUpgrade ocfs2-kmp-xenUpgrade drbd-kmp-rt_traceUpgrade kernel-vanillaUpgrade kernel-rt_traceUpgrade kernel-vanilla-develUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-xenpaeUpgrade cluster-network-kmp-paeUpgrade kernel-debug-develUpgrade kernel-pae-develUpgrade cluster-network-kmp-defaultUpgrade kernel-bigsmp-develUpgrade kernel-defaultUpgrade xen-kmp-traceUpgrade cluster-network-kmp-bigsmpUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-rt-develUpgrade kernel-rtUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-bigsmpUpgrade kernel-xen-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-vmipaeUpgrade kernel-xen-develUpgrade ext4dev-kmp-defaultUpgrade kernel-develUpgrade ext4dev-kmp-xenUpgrade kernel-rt_trace-develUpgrade btrfs-kmp-paeUpgrade gfs2-kmp-traceUpgrade kernel-source-vanillaUpgrade kernel-rt-baseUpgrade kernel-sourceUpgrade gfs2-kmp-ppc64Upgrade drbd-kmp-rtUpgrade kernel-traceUpgrade xen-kmp-defaultUpgrade kernel-ppc64Upgrade cluster-network-kmp-xenUpgrade lttng-modules-kmp-rtUpgrade kernel-ppc64-develUpgrade gfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade ocfs2-kmp-ppc64Upgrade kernel-vmiUpgrade cluster-network-kmp-traceUpgrade kernel-pae-extraUpgrade ocfs2-kmp-rtUpgrade kernel-kdumppaeUpgrade hyper-v-kmp-traceUpgrade gfs2-kmp-bigsmpUpgrade kernel-trace-extraUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-paeUpgrade kernel-desktop-develUpgrade ext4dev-kmp-traceUpgrade kernel-debug-baseUpgrade kernel-ec2-baseUpgrade kernel-smpUpgrade kernel-rt_trace-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ofed-kmp-rtUpgrade ocfs2-kmp-default | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-2.6.32-48-386Upgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-server | Nov 8, 2024 | Apr 22, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub