The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Apr 13, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-3.19.0-41-generic-lpaeUpgrade linux-image-4.2.0-21-generic-lpaeUpgrade linux-image-3.19.0-41-genericUpgrade linux-image-4.2.0-21-powerpc-e500mcUpgrade linux-image-4.2.0-21-lowlatencyUpgrade linux-image-4.2.0-21-powerpc-smpUpgrade linux-image-4.2.0-21-genericUpgrade linux-image-3.19.0-41-powerpc-e500mcUpgrade linux-image-3.19.0-41-powerpc64-smpUpgrade linux-image-3.19.0-41-lowlatencyUpgrade linux-image-4.2.0-21-powerpc64-smpUpgrade linux-image-3.19.0-41-powerpc64-embUpgrade linux-image-4.2.0-21-powerpc64-embUpgrade linux-image-4.2.0-1016-raspi2Upgrade linux-image-3.19.0-41-powerpc-smp | Dec 18, 2015 | Dec 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub