The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2013 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-traceUpgrade kernel-pae-baseUpgrade btrfs-kmp-xenUpgrade btrfs-kmp-paeUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade hyper-v-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-trace-develUpgrade hyper-v-kmp-paeUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-sourceUpgrade xen-kmp-traceUpgrade kernel-xen-baseUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade btrfs-kmp-defaultUpgrade xen-kmp-paeUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade hyper-v-kmp-traceUpgrade kernel-ec2-baseUpgrade xen-kmp-defaultUpgrade kernel-ec2-devel | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-57-serverUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-ia64Upgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-3.5.0-47-powerpc-smp | Nov 8, 2024 | Jan 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub