The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2013 |
| Suse | — | Upgrade xen-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade kernel-default-baseUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-paeUpgrade xen-kmp-traceUpgrade xen-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade kernel-ec2Upgrade kernel-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade kernel-xenUpgrade kernel-xen-develUpgrade btrfs-kmp-paeUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-default-develUpgrade kernel-traceUpgrade btrfs-kmp-xenUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-source | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-genericUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.8.0-37-genericUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-362-ec2Upgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-serverUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-3.11.0-17-generic | Nov 8, 2024 | Jan 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub