The iucv_sock_recvmsg function in net/iucv/af_iucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-bigsmp-develUpgrade kernel-pae-develUpgrade kernel-vanilla-develUpgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade cluster-network-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade ofed-kmp-rt_traceUpgrade xen-kmp-traceUpgrade kernel-rt_traceUpgrade ocfs2-kmp-paeUpgrade kernel-xen-extraUpgrade hyper-v-kmp-paeUpgrade kernel-xenUpgrade kernel-trace-develUpgrade ext4dev-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-pae-baseUpgrade kernel-paeUpgrade xen-kmp-paeUpgrade ocfs2-kmp-traceUpgrade kernel-source-rtUpgrade kernel-desktopUpgrade kernel-debugUpgrade kernel-ec2Upgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-xenUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-ec2-develUpgrade kernel-default-develUpgrade btrfs-kmp-defaultUpgrade kernel-desktop-baseUpgrade kernel-xenpaeUpgrade cluster-network-kmp-bigsmpUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade cluster-network-kmp-paeUpgrade kernel-default-manUpgrade ocfs2-kmp-rt_traceUpgrade kernel-symsUpgrade kernel-kdumpUpgrade cluster-network-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade cluster-network-kmp-ppc64Upgrade gfs2-kmp-traceUpgrade kernel-pae-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-ppc64Upgrade ext4dev-kmp-xenUpgrade ocfs2-kmp-bigsmpUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade gfs2-kmp-ppc64Upgrade btrfs-kmp-paeUpgrade kernel-rt-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-bigsmp-baseUpgrade kernel-source-vanillaUpgrade lttng-modules-kmp-rtUpgrade kernel-traceUpgrade kernel-rt-develUpgrade kernel-debug-baseUpgrade kernel-rtUpgrade kernel-trace-extraUpgrade iscsitarget-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade sle-hae-releaseUpgrade kernel-vmiUpgrade kernel-smpUpgrade kernel-desktop-develUpgrade gfs2-kmp-bigsmpUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-traceUpgrade kernel-rt_trace-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ext4dev-kmp-defaultUpgrade cluster-network-kmp-traceUpgrade kernel-rt_trace-baseUpgrade kernel-xen-develUpgrade ocfs2-kmp-rtUpgrade kernel-vmipaeUpgrade ofed-kmp-rtUpgrade kernel-sourceUpgrade xen-kmp-defaultUpgrade cluster-network-kmp-xenUpgrade drbd-kmp-rtUpgrade kernel-kdumppaeUpgrade kernel-ec2-baseUpgrade gfs2-kmp-xenUpgrade hyper-v-kmp-trace | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-powerpc-smp | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub