The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-network-kmp-default | Feb 2, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-4.2.0-21-powerpc64-smpUpgrade linux-image-3.13.0-73-powerpc64-smpUpgrade linux-image-3.16.0-56-powerpc64-embUpgrade linux-image-4.2.0-21-genericUpgrade linux-image-4.2.0-1016-raspi2Upgrade linux-image-3.13.0-73-genericUpgrade linux-image-3.19.0-41-genericUpgrade linux-image-3.19.0-41-powerpc64-smpUpgrade linux-image-3.13.0-73-powerpc64-embUpgrade linux-image-4.2.0-21-powerpc-smpUpgrade linux-image-3.16.0-56-powerpc-smpUpgrade linux-image-3.19.0-41-powerpc-smpUpgrade linux-image-4.2.0-21-powerpc-e500mcUpgrade linux-image-3.13.0-73-generic-lpaeUpgrade linux-image-3.16.0-56-powerpc-e500mcUpgrade linux-image-3.16.0-56-lowlatencyUpgrade linux-image-3.19.0-41-generic-lpaeUpgrade linux-image-3.19.0-41-lowlatencyUpgrade linux-image-3.13.0-73-powerpc-smpUpgrade linux-image-3.16.0-56-powerpc64-smpUpgrade linux-image-3.19.0-41-powerpc-e500mcUpgrade linux-image-3.16.0-56-genericUpgrade linux-image-3.19.0-41-powerpc64-embUpgrade linux-image-4.2.0-21-generic-lpaeUpgrade linux-image-4.2.0-21-lowlatencyUpgrade linux-image-3.13.0-73-powerpc-e500mcUpgrade linux-image-3.13.0-73-lowlatencyUpgrade linux-image-4.2.0-21-powerpc64-embUpgrade linux-image-3.16.0-56-generic-lpae | Dec 28, 2015 | Dec 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub