The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 18, 2014 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jan 18, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-57-serverUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-3.11.0-14-genericUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.8.0-35-genericUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-3.5.0-44-genericUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.2.0-58-virtualUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-2.6.32-362-ec2Upgrade linux-image-3.2.0-58-omapUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.11.0-14-generic-lpaeUpgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-58-generic-pae | Nov 8, 2024 | Jan 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub