An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 11, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf | Jun 17, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headers | Sep 28, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Jun 3, 2020 | Apr 2, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools | Apr 21, 2020 | Apr 2, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | May 7, 2020 | Apr 1, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default | Apr 24, 2020 | Apr 2, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-53-genericUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1067-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-101-genericUpgrade linux-image-gke-5.3Upgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1081-oemUpgrade linux-image-azureUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-aws-edge | May 19, 2020 | Apr 2, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub