net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Apr 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 22, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 22, 2013 |
| Suse | — | Upgrade kernel-vanillaUpgrade ocfs2-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade cluster-network-kmp-rtUpgrade cluster-network-kmp-ppc64Upgrade kernel-xenpaeUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-bigsmp-baseUpgrade sle-hae-releaseUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-vmiUpgrade kernel-kdumppaeUpgrade ofed-kmp-rtUpgrade kernel-xen-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade ocfs2-kmp-bigsmpUpgrade kernel-desktopUpgrade cluster-network-kmp-xenUpgrade kernel-trace-extraUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-trace-develUpgrade cluster-network-kmp-traceUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade ofed-kmp-rt_traceUpgrade gfs2-kmp-traceUpgrade kernel-defaultUpgrade cluster-network-kmp-bigsmpUpgrade gfs2-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-rt_trace-develUpgrade kernel-desktop-develUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-debug-develUpgrade kernel-xen-baseUpgrade kernel-xen-extraUpgrade xen-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-baseUpgrade kernel-rt_trace-baseUpgrade btrfs-kmp-paeUpgrade xen-kmp-paeUpgrade btrfs-kmp-xenUpgrade cluster-network-kmp-paeUpgrade kernel-source-vanillaUpgrade kernel-kdumpUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-xenUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-rt_traceUpgrade ext4dev-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade kernel-vanilla-develUpgrade btrfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-smpUpgrade xen-kmp-traceUpgrade kernel-source-rtUpgrade kernel-bigsmp-develUpgrade kernel-default-manUpgrade hyper-v-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-network-kmp-defaultUpgrade lttng-modules-kmp-rtUpgrade gfs2-kmp-bigsmpUpgrade kernel-rtUpgrade kernel-rt_traceUpgrade kernel-pae-baseUpgrade ocfs2-kmp-paeUpgrade kernel-default-extraUpgrade ocfs2-kmp-ppc64Upgrade kernel-paeUpgrade hyper-v-kmp-paeUpgrade kernel-traceUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64-baseUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade ocfs2-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-desktop-baseUpgrade kernel-vmipaeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-bigsmpUpgrade kernel-docsUpgrade kernel-pae-develUpgrade gfs2-kmp-ppc64Upgrade ocfs2-kmp-rtUpgrade kernel-pae-extra | Feb 17, 2015 | Apr 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-48-genericUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.8.0-23-genericUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-2.6.32-48-lpiaUpgrade linux-image-2.6.32-48-generic-paeUpgrade linux-image-3.5.0-34-powerpc-smpUpgrade linux-image-3.2.0-48-highbankUpgrade linux-image-3.5.0-34-genericUpgrade linux-image-2.6.32-48-preemptUpgrade linux-image-3.5.0-34-highbankUpgrade linux-image-2.6.32-48-powerpcUpgrade linux-image-3.2.0-48-powerpc-smpUpgrade linux-image-2.6.32-48-ia64Upgrade linux-image-3.8.0-22-genericUpgrade linux-image-3.2.0-48-powerpc64-smpUpgrade linux-image-3.5.0-34-powerpc64-smpUpgrade linux-image-2.6.32-48-versatileUpgrade linux-image-3.2.0-48-omapUpgrade linux-image-3.2.0-48-generic-paeUpgrade linux-image-2.6.32-48-386Upgrade linux-image-2.6.32-48-serverUpgrade linux-image-2.6.32-353-ec2Upgrade linux-image-2.6.32-48-virtualUpgrade linux-image-2.6.32-48-powerpc64-smpUpgrade linux-image-2.6.32-48-sparc64-smpUpgrade linux-image-3.2.0-48-genericUpgrade linux-image-3.2.0-48-virtualUpgrade linux-image-2.6.32-48-sparc64Upgrade linux-image-2.6.32-48-powerpc-smpUpgrade linux-image-3.5.0-34-omap | Nov 8, 2024 | Apr 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub