An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo | Jun 17, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Sep 28, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-devel | Jun 3, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftool | Apr 21, 2020 | Apr 2, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | May 7, 2020 | Apr 1, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extra | Apr 24, 2020 | Apr 2, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1081-oemUpgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-5.3Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1067-awsUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-4.15.0-101-genericUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-gke-5.0Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gkeop-5.3Upgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1022-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-oemUpgrade linux-image-4.4.0-1133-raspi2 | May 19, 2020 | Apr 2, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub