The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2013 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-ppc64-develUpgrade python-virtualboxUpgrade virtualbox-guest-kmp-desktopUpgrade cluster-network-kmp-paeUpgrade hdjmod-kmp-xenUpgrade kernel-ppc64Upgrade kernel-rt_trace-baseUpgrade kernel-ec2-baseUpgrade btrfs-kmp-paeUpgrade virtualbox-host-kmp-paeUpgrade openvswitch-pkiUpgrade ocfs2-kmp-defaultUpgrade virtualbox-guest-x11Upgrade cluster-network-kmp-xenUpgrade kernel-traceUpgrade kernel-source-vanillaUpgrade ofed-kmp-rtUpgrade kernel-kdumpUpgrade cluster-network-kmp-rtUpgrade python-openvswitchUpgrade kernel-sourceUpgrade cluster-network-kmp-traceUpgrade cluster-network-kmp-bigsmpUpgrade openvswitch-kmp-paeUpgrade drbd-kmp-rt_traceUpgrade kernel-xen-develUpgrade xen-doc-htmlUpgrade openvswitchUpgrade hdjmod-kmp-paeUpgrade sle-hae-releaseUpgrade ocfs2-kmp-bigsmpUpgrade virtualbox-guest-toolsUpgrade kernel-rt-baseUpgrade gfs2-kmp-traceUpgrade ipset-kmp-defaultUpgrade kernel-rt_trace-develUpgrade kernel-develUpgrade crash-kmp-desktopUpgrade hdjmod-kmp-desktopUpgrade openvswitch-kmp-desktopUpgrade iscsitarget-kmp-rtUpgrade virtualbox-host-kmp-desktopUpgrade kernel-pae-extraUpgrade xen-libsUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-rtUpgrade gfs2-kmp-paeUpgrade iscsitarget-kmp-xenUpgrade cloop-kmp-paeUpgrade kernel-kdumppaeUpgrade cloop-kmp-xenUpgrade xen-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade gfs2-kmp-bigsmpUpgrade virtualbox-host-kmp-defaultUpgrade kernel-debugUpgrade kernel-desktop-develUpgrade crash-kmp-paeUpgrade crash-kmp-defaultUpgrade kernel-xen-baseUpgrade xen-kmp-paeUpgrade iscsitarget-kmp-defaultUpgrade kernel-trace-baseUpgrade gfs2-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-desktopUpgrade openvswitch-kmp-defaultUpgrade iscsitarget-kmp-paeUpgrade ipset-kmp-desktopUpgrade xen-toolsUpgrade ndiswrapper-kmp-paeUpgrade crashUpgrade xen-xend-toolsUpgrade drbd-kmp-rtUpgrade ndiswrapperUpgrade crash-kmp-xenUpgrade gfs2-kmp-xenUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-bigsmp-baseUpgrade virtualbox-guest-kmp-defaultUpgrade kernel-vmiUpgrade xen-libs-32bitUpgrade ofed-kmp-rt_traceUpgrade kernel-paeUpgrade crash-eppicUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-default-manUpgrade kernel-smpUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade btrfs-kmp-xenUpgrade ocfs2-kmp-traceUpgrade ocfs2-kmp-paeUpgrade kernel-rt_traceUpgrade openvswitch-controllerUpgrade ocfs2-kmp-rt_traceUpgrade ipset-develUpgrade kernel-bigsmpUpgrade hyper-v-kmp-traceUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade kernel-ec2Upgrade kernel-default-develUpgrade virtualbox-guest-kmp-paeUpgrade xtables-addons-kmp-desktopUpgrade openvswitch-kmp-xenUpgrade cluster-network-kmp-defaultUpgrade lttng-modules-kmp-rtUpgrade hdjmod-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-vmipaeUpgrade xen-tools-domUUpgrade ext4dev-kmp-traceUpgrade xtables-addons-kmp-xenUpgrade openvswitch-testUpgrade python-openvswitch-testUpgrade ocfs2-kmp-ppc64Upgrade ndiswrapper-kmp-desktopUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-xenUpgrade xtables-addons-kmp-defaultUpgrade cluster-network-kmp-rt_traceUpgrade crash-develUpgrade kernel-docsUpgrade xenUpgrade kernel-desktop-baseUpgrade kernel-syms-rtUpgrade ipsetUpgrade iscsitargetUpgrade kernel-ppc64-baseUpgrade virtualboxUpgrade cloop-kmp-defaultUpgrade hdjmodUpgrade ext4dev-kmp-paeUpgrade ipset-kmp-xenUpgrade xen-kmp-desktopUpgrade xtables-addonsUpgrade crash-docUpgrade kernel-xen-extraUpgrade ocfs2-kmp-rtUpgrade hyper-v-kmp-paeUpgrade openvswitch-switchUpgrade kernel-xenpaeUpgrade ext4dev-kmp-defaultUpgrade gfs2-kmp-ppc64Upgrade virtualbox-develUpgrade libipset3Upgrade ndiswrapper-kmp-defaultUpgrade pcfclock-kmp-paeUpgrade pcfclockUpgrade cluster-network-kmp-ppc64Upgrade pcfclock-kmp-defaultUpgrade cloop-kmp-desktopUpgrade cloopUpgrade ocfs2-kmp-xenUpgrade kernel-source-rtUpgrade pcfclock-kmp-desktopUpgrade xtables-addons-kmp-paeUpgrade kernel-default-extraUpgrade kernel-trace-develUpgrade btrfs-kmp-defaultUpgrade kernel-defaultUpgrade iscsitarget-kmp-desktopUpgrade crash-gcoreUpgrade virtualbox-qtUpgrade virtualbox-websrvUpgrade kernel-pae-baseUpgrade xen-develUpgrade kernel-bigsmp-develUpgrade xen-kmp-traceUpgrade ipset-kmp-paeUpgrade hyper-v-kmp-default | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-47-genericUpgrade linux-image-2.6.32-56-serverUpgrade linux-image-2.6.32-56-lpiaUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-56-virtualUpgrade linux-image-2.6.32-56-preemptUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-56-386Upgrade linux-image-2.6.32-56-powerpcUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-56-genericUpgrade linux-image-2.6.32-56-versatileUpgrade linux-image-2.6.32-361-ec2Upgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-2.6.32-56-sparc64-smpUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-56-ia64Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-2.6.32-56-powerpc64-smpUpgrade linux-image-2.6.32-56-powerpc-smpUpgrade linux-image-2.6.32-56-sparc64Upgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-2.6.32-56-generic-paeUpgrade linux-image-3.2.0-59-powerpc64-smp | Nov 8, 2024 | Jan 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub