The rose_recvmsg function in net/rose/af_rose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-trace-extraUpgrade kernel-bigsmp-develUpgrade ocfs2-kmp-xenUpgrade gfs2-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade xen-kmp-defaultUpgrade kernel-desktopUpgrade kernel-xenpaeUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade ofed-kmp-rt_traceUpgrade kernel-paeUpgrade cluster-network-kmp-xenUpgrade kernel-default-develUpgrade btrfs-kmp-defaultUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-bigsmpUpgrade kernel-xenUpgrade iscsitarget-kmp-rtUpgrade ext4dev-kmp-xenUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-kdumpUpgrade cluster-network-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade kernel-xen-extraUpgrade kernel-debug-develUpgrade kernel-kdumppaeUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-bigsmpUpgrade kernel-desktop-baseUpgrade kernel-ec2-develUpgrade kernel-vmipaeUpgrade xen-kmp-paeUpgrade ocfs2-kmp-rt_traceUpgrade kernel-develUpgrade cluster-network-kmp-ppc64Upgrade ocfs2-kmp-traceUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-pae-develUpgrade ofed-kmp-rtUpgrade gfs2-kmp-xenUpgrade kernel-ppc64-baseUpgrade xen-kmp-traceUpgrade kernel-trace-develUpgrade gfs2-kmp-paeUpgrade ext4dev-kmp-traceUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-smpUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade ext4dev-kmp-paeUpgrade ocfs2-kmp-paeUpgrade gfs2-kmp-traceUpgrade ocfs2-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-sourceUpgrade gfs2-kmp-bigsmpUpgrade kernel-pae-baseUpgrade ocfs2-kmp-bigsmpUpgrade lttng-modules-kmp-rtUpgrade kernel-bigsmp-baseUpgrade kernel-source-rtUpgrade kernel-ppc64Upgrade kernel-pae-extraUpgrade kernel-vmiUpgrade kernel-rt_traceUpgrade kernel-desktop-develUpgrade kernel-default-extraUpgrade sle-hae-releaseUpgrade kernel-traceUpgrade kernel-debug-baseUpgrade hyper-v-kmp-paeUpgrade kernel-ppc64-develUpgrade kernel-rt_trace-baseUpgrade kernel-default-manUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade hyper-v-kmp-traceUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade ocfs2-kmp-ppc64Upgrade gfs2-kmp-ppc64Upgrade kernel-rt_trace-develUpgrade btrfs-kmp-pae | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-2.6.32-48-virtualUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-3.5.0-34-omapUpgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.8.0-23-genericUpgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-genericUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.2.0-48-highbankUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-353-ec2Upgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.8.0-22-generic | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub