The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-docUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade perf | Dec 1, 2016 | Jan 6, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2013 |
| Suse | — | Upgrade hyper-v-kmp-paeUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-pae-develUpgrade xen-kmp-traceUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-xenUpgrade kernel-default-manUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade btrfs-kmp-paeUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-traceUpgrade kernel-xen-develUpgrade xen-kmp-paeUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade ext4dev-kmp-defaultUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade kernel-pae-baseUpgrade hyper-v-kmp-trace | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-3.2.0-59-virtualUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-generic | Nov 8, 2024 | Jan 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub