The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-ppc64-develUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-default-manUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ppc64-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-23-generic-paeUpgrade linux-image-2.6.15-57-amd64-xeonUpgrade linux-image-2.6.15-57-serverUpgrade linux-image-2.6.15-57-powerpc64-smpUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.15-57-hppa32Upgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.31-23-sparc64Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.31-23-ia64Upgrade linux-image-2.6.31-308-ec2Upgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.31-23-powerpcUpgrade linux-image-2.6.15-57-hppa64Upgrade linux-image-2.6.15-57-amd64-serverUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.31-23-powerpc-smpUpgrade linux-image-2.6.15-57-686Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.31-23-sparc64-smpUpgrade linux-image-2.6.15-57-server-bigironUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.15-57-hppa32-smpUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.15-57-386Upgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.15-57-powerpc-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.15-57-mckinleyUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.31-23-virtualUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.15-57-mckinley-smpUpgrade linux-image-2.6.15-57-itanium-smpUpgrade linux-image-2.6.31-23-powerpc64-smpUpgrade linux-image-2.6.15-57-amd64-genericUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.15-57-amd64-k8Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.15-57-itaniumUpgrade linux-image-2.6.31-23-lpiaUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.31-23-genericUpgrade linux-image-2.6.15-57-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.31-23-serverUpgrade linux-image-2.6.31-23-386Upgrade linux-image-2.6.15-57-sparc64Upgrade linux-image-2.6.15-57-k7Upgrade linux-image-2.6.15-57-sparc64-smpUpgrade linux-image-2.6.15-57-hppa64-smpUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-sparc64 | Nov 8, 2024 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub