The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-smpUpgrade kernel-smp-develUpgrade kernel-largesmp-develUpgrade kernelUpgrade kernel-xenUUpgrade kernel-largesmpUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xenU-devel | Dec 1, 2016 | Nov 29, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 29, 2010 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade kernel-ppc64-develUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ppc64 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-28-lpiaUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-28-sparc64Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-28-powerpc-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-312-ec2Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-25-powerpc64-smpUpgrade linux-image-2.6.35-25-powerpc-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.32-28-generic-paeUpgrade linux-image-2.6.32-28-virtualUpgrade linux-image-2.6.32-28-serverUpgrade linux-image-2.6.32-28-ia64Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-28-genericUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.32-28-versatileUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-28-386Upgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-28-preemptUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-28-powerpcUpgrade linux-image-2.6.35-25-powerpcUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-25-omapUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-28-sparc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.32-28-powerpc64-smpUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-25-versatile | Nov 8, 2024 | Nov 29, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Nov 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub