The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTL_BCM_GET_DEVICE_DRIVER_INFO ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2013 |
| Suse | — | Upgrade kernel-default-baseUpgrade iscsitarget-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade iscsitarget-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade gfs2-kmp-xenUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-xenUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade ofed-kmp-rtUpgrade kernel-vanillaUpgrade kernel-debug-develUpgrade kernel-pae-develUpgrade lttng-modules-kmp-rt_traceUpgrade sle-hae-releaseUpgrade kernel-bigsmpUpgrade kernel-develUpgrade kernel-trace-baseUpgrade kernel-rt-develUpgrade kernel-paeUpgrade gfs2-kmp-defaultUpgrade xen-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-xen-extraUpgrade xen-kmp-paeUpgrade ofed-kmp-rt_traceUpgrade cluster-network-kmp-bigsmpUpgrade cluster-network-kmp-defaultUpgrade kernel-desktopUpgrade cluster-network-kmp-xenUpgrade cluster-network-kmp-paeUpgrade kernel-default-develUpgrade cluster-network-kmp-rtUpgrade ocfs2-kmp-xenUpgrade kernel-ppc64-baseUpgrade kernel-debugUpgrade cluster-network-kmp-ppc64Upgrade kernel-trace-extraUpgrade kernel-symsUpgrade kernel-ec2Upgrade kernel-rt_trace-baseUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-bigsmpUpgrade drbd-kmp-rtUpgrade kernel-rt_trace-develUpgrade kernel-ppc64-develUpgrade kernel-rtUpgrade ocfs2-kmp-traceUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade kernel-pae-extraUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-bigsmpUpgrade kernel-source-rtUpgrade kernel-bigsmp-develUpgrade gfs2-kmp-ppc64Upgrade xen-kmp-traceUpgrade kernel-traceUpgrade ocfs2-kmp-ppc64Upgrade kernel-ec2-develUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade lttng-modules-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-default-manUpgrade cluster-network-kmp-traceUpgrade gfs2-kmp-traceUpgrade kernel-ppc64Upgrade kernel-desktop-baseUpgrade ocfs2-kmp-paeUpgrade kernel-vanilla-develUpgrade kernel-rt_traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-desktop-develUpgrade kernel-rt-base | Jan 31, 2014 | Nov 12, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.5.0-45-powerpc64-smpUpgrade linux-image-3.5.0-237-omap4Upgrade linux-image-3.2.0-58-virtualUpgrade linux-image-3.2.0-58-generic-paeUpgrade linux-image-3.2.0-58-omapUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.5.0-45-omapUpgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.5.0-45-powerpc-smpUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-3.5.0-45-highbankUpgrade linux-image-3.2.0-1442-omap4 | Nov 8, 2024 | Nov 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub