The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-desktopUpgrade kernel-vmipaeUpgrade kernel-kdumpUpgrade kernel-rt_trace-develUpgrade kernel-pae-baseUpgrade gfs2-kmp-paeUpgrade btrfs-kmp-xenUpgrade btrfs-kmp-defaultUpgrade ocfs2-kmp-bigsmpUpgrade xen-kmp-defaultUpgrade kernel-trace-extraUpgrade kernel-vanillaUpgrade kernel-docsUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-xenUpgrade kernel-default-extraUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-develUpgrade kernel-debugUpgrade drbd-kmp-rt_traceUpgrade kernel-kdumppaeUpgrade kernel-ppc64-baseUpgrade kernel-xen-extraUpgrade kernel-defaultUpgrade gfs2-kmp-traceUpgrade kernel-debug-baseUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xen-baseUpgrade gfs2-kmp-bigsmpUpgrade kernel-rt-baseUpgrade cluster-network-kmp-paeUpgrade kernel-ppc64-develUpgrade cluster-network-kmp-defaultUpgrade cluster-network-kmp-ppc64Upgrade kernel-ec2-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-rt_trace-baseUpgrade kernel-xenpaeUpgrade kernel-pae-extraUpgrade gfs2-kmp-xenUpgrade kernel-rt-develUpgrade kernel-bigsmp-baseUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-ppc64Upgrade cluster-network-kmp-bigsmpUpgrade ofed-kmp-rtUpgrade kernel-symsUpgrade sle-hae-releaseUpgrade kernel-vanilla-develUpgrade hyper-v-kmp-paeUpgrade kernel-ec2-develUpgrade ocfs2-kmp-traceUpgrade kernel-bigsmpUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-ec2Upgrade kernel-rt_traceUpgrade kernel-source-vanillaUpgrade kernel-vmiUpgrade kernel-paeUpgrade ocfs2-kmp-ppc64Upgrade kernel-desktop-develUpgrade ocfs2-kmp-paeUpgrade xen-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-xenUpgrade kernel-desktop-baseUpgrade kernel-pae-develUpgrade kernel-syms-rtUpgrade cluster-network-kmp-traceUpgrade kernel-traceUpgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-traceUpgrade ofed-kmp-rt_traceUpgrade kernel-xenUpgrade kernel-bigsmp-develUpgrade btrfs-kmp-paeUpgrade lttng-modules-kmp-rtUpgrade ext4dev-kmp-xenUpgrade kernel-default-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-smpUpgrade kernel-trace-develUpgrade hyper-v-kmp-defaultUpgrade xen-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade lttng-modules-kmp-rt_traceUpgrade ocfs2-kmp-rt_trace | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-powerpc | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub