The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-traceUpgrade hyper-v-kmp-paeUpgrade lttng-modules-kmp-rtUpgrade kernel-ec2Upgrade kernel-source-rtUpgrade sle-hae-releaseUpgrade kernel-ec2-develUpgrade ext4dev-kmp-xenUpgrade kernel-desktop-develUpgrade kernel-source-vanillaUpgrade kernel-trace-develUpgrade xen-kmp-traceUpgrade kernel-vanilla-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade ext4dev-kmp-paeUpgrade kernel-syms-rtUpgrade kernel-bigsmp-develUpgrade cluster-network-kmp-traceUpgrade kernel-smpUpgrade ofed-kmp-rt_traceUpgrade kernel-traceUpgrade kernel-default-develUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-xenUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade ocfs2-kmp-ppc64Upgrade kernel-desktop-baseUpgrade kernel-rt_traceUpgrade kernel-paeUpgrade gfs2-kmp-ppc64Upgrade kernel-bigsmpUpgrade kernel-pae-develUpgrade kernel-rtUpgrade xen-kmp-paeUpgrade kernel-vmiUpgrade kernel-default-manUpgrade drbd-kmp-rtUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-rt_trace-baseUpgrade kernel-vmipaeUpgrade iscsitarget-kmp-rtUpgrade kernel-kdumpUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade cluster-network-kmp-bigsmpUpgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-default-extraUpgrade ocfs2-kmp-bigsmpUpgrade cluster-network-kmp-ppc64Upgrade kernel-defaultUpgrade drbd-kmp-rt_traceUpgrade kernel-debugUpgrade gfs2-kmp-traceUpgrade btrfs-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade kernel-debug-baseUpgrade kernel-ppc64-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-rt_trace-develUpgrade gfs2-kmp-bigsmpUpgrade kernel-xen-extraUpgrade cluster-network-kmp-rtUpgrade xen-kmp-defaultUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-ppc64-baseUpgrade kernel-rt-baseUpgrade cluster-network-kmp-paeUpgrade kernel-pae-extraUpgrade cluster-network-kmp-rt_traceUpgrade gfs2-kmp-paeUpgrade kernel-default-baseUpgrade cluster-network-kmp-defaultUpgrade ofed-kmp-rtUpgrade ocfs2-kmp-rtUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-xenUpgrade cluster-network-kmp-xenUpgrade kernel-desktopUpgrade kernel-develUpgrade kernel-kdumppaeUpgrade kernel-xen-develUpgrade kernel-bigsmp-baseUpgrade btrfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debug-devel | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.2.0-48-highbankUpgrade linux-image-2.6.32-48-386Upgrade linux-image-3.8.0-22-genericUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.5.0-34-highbank | Nov 8, 2024 | Apr 22, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub