An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jun 17, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perf | Sep 28, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Jun 3, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-devel | Apr 21, 2020 | Apr 2, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | May 7, 2020 | Apr 1, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Apr 24, 2020 | Apr 2, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-oemUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-gkeop-5.3Upgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1067-awsUpgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-awsUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-4.15.0-101-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-4.15.0-1081-oemUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-gke-5.3Upgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-lowlatency-lts-xenial | May 19, 2020 | Apr 2, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub