The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2013 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade cluster-network-kmp-paeUpgrade kernel-bigsmp-baseUpgrade virtualbox-host-kmp-desktopUpgrade cloop-kmp-xenUpgrade kernel-develUpgrade kernel-debugUpgrade openvswitch-kmp-paeUpgrade cloop-kmp-paeUpgrade kernel-pae-extraUpgrade iscsitarget-kmp-xenUpgrade virtualbox-host-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-trace-baseUpgrade ext4dev-kmp-xenUpgrade gfs2-kmp-bigsmpUpgrade ocfs2-kmp-defaultUpgrade xen-kmp-paeUpgrade iscsitarget-kmp-paeUpgrade kernel-sourceUpgrade openvswitch-kmp-defaultUpgrade ipset-kmp-desktopUpgrade iscsitarget-kmp-defaultUpgrade gfs2-kmp-xenUpgrade xen-kmp-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade openvswitch-kmp-desktopUpgrade crash-kmp-xenUpgrade crash-kmp-defaultUpgrade iscsitarget-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-ppc64Upgrade sle-hae-releaseUpgrade gfs2-kmp-traceUpgrade kernel-ppc64-develUpgrade kernel-ec2-baseUpgrade kernel-rt-baseUpgrade openvswitchUpgrade virtualbox-guest-kmp-desktopUpgrade btrfs-kmp-paeUpgrade hdjmod-kmp-xenUpgrade kernel-rt_trace-develUpgrade ndiswrapper-kmp-paeUpgrade kernel-source-vanillaUpgrade python-openvswitchUpgrade ofed-kmp-rtUpgrade ndiswrapperUpgrade virtualbox-host-kmp-paeUpgrade kernel-rt-develUpgrade python-virtualboxUpgrade xen-doc-htmlUpgrade drbd-kmp-rt_traceUpgrade kernel-kdumpUpgrade kernel-xen-baseUpgrade xen-libsUpgrade cluster-network-kmp-traceUpgrade hdjmod-kmp-desktopUpgrade crash-kmp-desktopUpgrade kernel-xen-develUpgrade kernel-desktopUpgrade kernel-symsUpgrade virtualbox-guest-kmp-defaultUpgrade drbd-kmp-rtUpgrade ocfs2-kmp-bigsmpUpgrade openvswitch-pkiUpgrade cluster-network-kmp-bigsmpUpgrade hdjmod-kmp-paeUpgrade ofed-kmp-rt_traceUpgrade kernel-traceUpgrade kernel-rtUpgrade virtualbox-guest-x11Upgrade kernel-desktop-develUpgrade gfs2-kmp-paeUpgrade cluster-network-kmp-rtUpgrade ipset-kmp-defaultUpgrade kernel-vmiUpgrade xen-libs-32bitUpgrade virtualbox-guest-toolsUpgrade kernel-rt_trace-baseUpgrade crashUpgrade xen-toolsUpgrade crash-kmp-paeUpgrade xen-xend-toolsUpgrade kernel-debug-baseUpgrade cluster-network-kmp-xenUpgrade python-openvswitch-testUpgrade cloopUpgrade kernel-desktop-baseUpgrade openvswitch-switchUpgrade kernel-xenUpgrade cluster-network-kmp-ppc64Upgrade virtualbox-guest-kmp-paeUpgrade xtables-addons-kmp-defaultUpgrade kernel-default-develUpgrade pcfclock-kmp-defaultUpgrade virtualbox-websrvUpgrade xtables-addons-kmp-paeUpgrade hdjmod-kmp-defaultUpgrade ocfs2-kmp-rt_traceUpgrade kernel-bigsmpUpgrade ocfs2-kmp-traceUpgrade kernel-pae-develUpgrade hyper-v-kmp-defaultUpgrade kernel-syms-rtUpgrade ext4dev-kmp-defaultUpgrade virtualbox-develUpgrade lttng-modules-kmp-rtUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-paeUpgrade cloop-kmp-desktopUpgrade kernel-xenpaeUpgrade libipset3Upgrade hyper-v-kmp-traceUpgrade ipset-develUpgrade xen-kmp-traceUpgrade ocfs2-kmp-rtUpgrade kernel-vmipaeUpgrade kernel-default-extraUpgrade btrfs-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade openvswitch-testUpgrade xtables-addonsUpgrade ipsetUpgrade openvswitch-kmp-xenUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade xtables-addons-kmp-xenUpgrade gfs2-kmp-ppc64Upgrade lttng-modules-kmp-rt_traceUpgrade ndiswrapper-kmp-defaultUpgrade btrfs-kmp-xenUpgrade pcfclock-kmp-desktopUpgrade kernel-source-rtUpgrade kernel-xen-extraUpgrade ocfs2-kmp-ppc64Upgrade kernel-rt_traceUpgrade cloop-kmp-defaultUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade cluster-network-kmp-rt_traceUpgrade iscsitarget-kmp-desktopUpgrade ext4dev-kmp-paeUpgrade kernel-defaultUpgrade ipset-kmp-paeUpgrade openvswitch-controllerUpgrade crash-eppicUpgrade virtualboxUpgrade kernel-vanilla-develUpgrade kernel-ppc64-baseUpgrade crash-develUpgrade cluster-network-kmp-defaultUpgrade iscsitargetUpgrade kernel-docsUpgrade xen-kmp-desktopUpgrade ipset-kmp-xenUpgrade kernel-pae-baseUpgrade kernel-bigsmp-develUpgrade crash-gcoreUpgrade pcfclock-kmp-paeUpgrade xtables-addons-kmp-desktopUpgrade kernel-ec2-develUpgrade ocfs2-kmp-xenUpgrade ext4dev-kmp-traceUpgrade xen-tools-domUUpgrade pcfclockUpgrade ocfs2-kmp-paeUpgrade kernel-debug-develUpgrade ndiswrapper-kmp-desktopUpgrade xenUpgrade xen-develUpgrade crash-docUpgrade hdjmodUpgrade kernel-smpUpgrade virtualbox-qt | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-56-lpiaUpgrade linux-image-2.6.32-56-386Upgrade linux-image-2.6.32-56-versatileUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-56-powerpcUpgrade linux-image-2.6.32-56-genericUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-2.6.32-56-serverUpgrade linux-image-2.6.32-56-virtualUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-56-preemptUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-2.6.32-56-generic-paeUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-56-sparc64Upgrade linux-image-2.6.32-361-ec2Upgrade linux-image-3.5.0-47-highbankUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-56-powerpc-smpUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-56-powerpc64-smpUpgrade linux-image-2.6.32-56-sparc64-smpUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-56-ia64 | Nov 8, 2024 | Jan 6, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub