The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 18, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-devel | Dec 4, 2019 | Jan 18, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Jan 18, 2014 |
| Ubuntu | — | Upgrade linux-image-3.11.0-17-genericUpgrade linux-image-3.2.0-1444-omap4Upgrade linux-image-2.6.32-57-genericUpgrade linux-image-2.6.32-57-preemptUpgrade linux-image-2.6.32-57-lpiaUpgrade linux-image-3.5.0-47-omapUpgrade linux-image-3.5.0-239-omap4Upgrade linux-image-2.6.32-57-sparc64-smpUpgrade linux-image-3.2.0-60-highbankUpgrade linux-image-2.6.32-57-386Upgrade linux-image-3.5.0-47-genericUpgrade linux-image-2.6.32-57-powerpcUpgrade linux-image-3.2.0-60-virtualUpgrade linux-image-3.5.0-47-powerpc-smpUpgrade linux-image-2.6.32-57-generic-paeUpgrade linux-image-3.5.0-47-powerpc64-smpUpgrade linux-image-3.8.0-37-genericUpgrade linux-image-2.6.32-57-sparc64Upgrade linux-image-3.11.0-17-generic-lpaeUpgrade linux-image-2.6.32-57-ia64Upgrade linux-image-3.2.0-60-generic-paeUpgrade linux-image-3.2.0-60-omapUpgrade linux-image-2.6.32-57-virtualUpgrade linux-image-3.2.0-60-powerpc-smpUpgrade linux-image-2.6.32-57-powerpc-smpUpgrade linux-image-3.2.0-60-genericUpgrade linux-image-3.2.0-60-powerpc64-smpUpgrade linux-image-2.6.32-57-powerpc64-smpUpgrade linux-image-2.6.32-57-versatileUpgrade linux-image-2.6.32-57-serverUpgrade linux-image-3.5.0-47-highbankUpgrade linux-image-2.6.32-362-ec2 | Nov 8, 2024 | Jan 18, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub