The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-docUpgrade perf | Dec 1, 2016 | Jan 6, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2013 |
| Suse | — | Upgrade kernel-ec2-baseUpgrade btrfs-kmp-xenUpgrade btrfs-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade xen-kmp-paeUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-paeUpgrade kernel-pae-develUpgrade hyper-v-kmp-traceUpgrade kernel-ec2Upgrade kernel-xenUpgrade ext4dev-kmp-traceUpgrade kernel-defaultUpgrade xen-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade btrfs-kmp-paeUpgrade hyper-v-kmp-default | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-386Upgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.11.0-17-generic | Nov 8, 2024 | Jan 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub