The l2tp_ip6_recvmsg function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.9-rc7 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-pae-develUpgrade kernel-vanillaUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-develUpgrade kernel-ec2-develUpgrade kernel-debugUpgrade kernel-desktop-baseUpgrade kernel-ec2-baseUpgrade kernel-trace-develUpgrade kernel-desktopUpgrade kernel-vanilla-develUpgrade kernel-docsUpgrade kernel-debug-baseUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-desktop-develUpgrade kernel-default-base | Jan 9, 2014 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.8.0-22-generic | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub