The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 8, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2013 |
| Suse | — | Upgrade crashUpgrade xen-libsUpgrade kernel-develUpgrade kernel-traceUpgrade hdjmod-kmp-desktopUpgrade virtualbox-guest-x11Upgrade xen-xend-toolsUpgrade kernel-ec2Upgrade kernel-debugUpgrade ndiswrapper-kmp-paeUpgrade xen-kmp-defaultUpgrade pcfclock-kmp-paeUpgrade virtualbox-guest-kmp-paeUpgrade virtualbox-websrvUpgrade openvswitch-switchUpgrade kernel-source-vanillaUpgrade xen-develUpgrade pcfclock-kmp-defaultUpgrade python-openvswitch-testUpgrade crash-kmp-paeUpgrade virtualbox-host-kmp-defaultUpgrade kernel-vanillaUpgrade crash-kmp-xenUpgrade ipset-develUpgrade kernel-xenUpgrade xen-tools-domUUpgrade openvswitch-kmp-desktopUpgrade virtualbox-guest-kmp-defaultUpgrade kernel-debug-baseUpgrade xenUpgrade virtualbox-develUpgrade kernel-paeUpgrade crash-gcoreUpgrade kernel-debug-develUpgrade cloop-kmp-paeUpgrade cloop-kmp-xenUpgrade crash-develUpgrade kernel-vanilla-develUpgrade kernel-default-develUpgrade xtables-addons-kmp-paeUpgrade crash-kmp-defaultUpgrade iscsitarget-kmp-xenUpgrade pcfclock-kmp-desktopUpgrade virtualbox-host-kmp-paeUpgrade xtables-addons-kmp-desktopUpgrade xen-doc-htmlUpgrade libipset3Upgrade openvswitchUpgrade hdjmod-kmp-paeUpgrade kernel-sourceUpgrade kernel-desktopUpgrade kernel-symsUpgrade hdjmod-kmp-defaultUpgrade ipset-kmp-paeUpgrade kernel-default-baseUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade hdjmodUpgrade iscsitargetUpgrade crash-kmp-desktopUpgrade ipset-kmp-xenUpgrade python-openvswitchUpgrade kernel-trace-develUpgrade virtualbox-qtUpgrade xen-kmp-paeUpgrade kernel-docsUpgrade cloopUpgrade hdjmod-kmp-xenUpgrade openvswitch-pkiUpgrade crash-eppicUpgrade iscsitarget-kmp-defaultUpgrade kernel-pae-develUpgrade openvswitch-kmp-defaultUpgrade kernel-defaultUpgrade kernel-desktop-develUpgrade openvswitch-testUpgrade kernel-desktop-baseUpgrade ipsetUpgrade virtualbox-guest-toolsUpgrade pcfclockUpgrade ndiswrapper-kmp-defaultUpgrade virtualbox-guest-kmp-desktopUpgrade openvswitch-kmp-xenUpgrade openvswitch-kmp-paeUpgrade virtualbox-host-kmp-desktopUpgrade xen-kmp-desktopUpgrade xtables-addons-kmp-defaultUpgrade ndiswrapperUpgrade cloop-kmp-desktopUpgrade openvswitch-controllerUpgrade ipset-kmp-desktopUpgrade xtables-addons-kmp-xenUpgrade xtables-addonsUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade ndiswrapper-kmp-desktopUpgrade ipset-kmp-defaultUpgrade virtualboxUpgrade cloop-kmp-defaultUpgrade kernel-ec2-develUpgrade iscsitarget-kmp-paeUpgrade crash-docUpgrade kernel-trace-baseUpgrade python-virtualboxUpgrade kernel-ec2-baseUpgrade iscsitarget-kmp-desktopUpgrade kernel-pae-base | Feb 17, 2015 | Jan 8, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-56-virtualUpgrade linux-image-3.2.0-59-powerpc-smpUpgrade linux-image-3.2.0-59-highbankUpgrade linux-image-2.6.32-56-ia64Upgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-56-lpiaUpgrade linux-image-3.2.0-59-powerpc64-smpUpgrade linux-image-2.6.32-56-powerpc-smpUpgrade linux-image-2.6.32-56-powerpc64-smpUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.2.0-59-omapUpgrade linux-image-2.6.32-56-sparc64-smpUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.2.0-59-generic-paeUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-3.2.0-59-genericUpgrade linux-image-2.6.32-56-generic-paeUpgrade linux-image-2.6.32-56-sparc64Upgrade linux-image-2.6.32-56-powerpcUpgrade linux-image-2.6.32-56-serverUpgrade linux-image-3.2.0-1443-omap4Upgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-2.6.32-56-genericUpgrade linux-image-2.6.32-56-versatileUpgrade linux-image-3.2.0-59-virtualUpgrade linux-image-3.5.0-47-genericUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-3.11.0-17-genericUpgrade linux-image-2.6.32-56-386Upgrade linux-image-2.6.32-56-preemptUpgrade linux-image-2.6.32-361-ec2 | Nov 8, 2024 | Jan 8, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub