The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 6, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 21, 2013 |
| Suse | — | Upgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade btrfs-kmp-paeUpgrade ext4dev-kmp-xenUpgrade kernel-symsUpgrade kernel-default-develUpgrade btrfs-kmp-xenUpgrade kernel-default-baseUpgrade kernel-xen-develUpgrade xen-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade ext4dev-kmp-traceUpgrade hyper-v-kmp-paeUpgrade kernel-pae-develUpgrade ext4dev-kmp-paeUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade kernel-xenUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade xen-kmp-traceUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-default-man | Feb 17, 2015 | Jan 6, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-2.6.32-362-ec2Upgrade linux-image-3.5.0-47-omapUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.2.0-59-highbankUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-2.6.32-57-generic | Nov 8, 2024 | Jan 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub