The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-bigsmpUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade kernel-debug-extraUpgrade slert-releaseUpgrade kernel-ec2Upgrade ofed-cxgb3-NIC-kmp-rtUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-64k-pagesizeUpgrade pcc-acpi-kmp-debugUpgrade iscsitarget-kmp-debugUpgrade kernel-rt_debugUpgrade dazuko-kmp-debugUpgrade kernel-pae-extraUpgrade kernel-paeUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kernel-s390xUpgrade kernel-rt_bigsmpUpgrade kernel-ps3Upgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade kernel-kdumpUpgrade kernel-rtUpgrade kernel-s390x-debugUpgrade kernel-smpUpgrade ofedUpgrade kqemu-kmp-debugUpgrade ofed-kmp-rt_debugUpgrade gspcav-kmp-debugUpgrade kernel-rt_timingUpgrade wlan-ng-kmp-debugUpgrade kernel-pseries64Upgrade kernel-debug-baseUpgrade acx-kmp-debugUpgrade ofed-kmp-rt_timingUpgrade virtualbox-ose-kmp-debugUpgrade kernel-ec2-baseUpgrade aufs-kmp-debugUpgrade ib-bonding-kmp-rt_debugUpgrade kernel-trace-baseUpgrade kernel-s390Upgrade nouveau-kmp-debugUpgrade acerhk-kmp-debugUpgrade kernel-ppc64-baseUpgrade ofed-docUpgrade kernel-sn2Upgrade ofed-kmp-rtUpgrade tpctl-kmp-debugUpgrade kernel-ppc64-extraUpgrade kernel-pae-baseUpgrade um-host-install-initrdUpgrade um-host-kernelUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-sourceUpgrade omnibook-kmp-debugUpgrade kernel-s390-debugUpgrade kernel-traceUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade ib-bonding-kmp-rt_timingUpgrade kernel-xen-extraUpgrade ib-bonding-kmp-rt_bigsmpUpgrade kernel-ec2-extraUpgrade vmware-kmp-debugUpgrade drbd-kmp-debugUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-vanillaUpgrade appleir-kmp-debugUpgrade ib-bonding-kmp-rtUpgrade pcfclock-kmp-debugUpgrade at76_usb-kmp-debugUpgrade uvcvideo-kmp-debugUpgrade kernel-ppc64Upgrade kernel-pmac64Upgrade atl2-kmp-debugUpgrade kernel-docsUpgrade kernel-trace-extraUpgrade ivtv-kmp-debugUpgrade kernel-iseries64Upgrade xen-kmpUpgrade kernel-um | Feb 17, 2015 | Aug 28, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-25-openvz | Nov 8, 2024 | Aug 28, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 28, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub