The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
CVSS Details
- CVSS 3.1 Base Score: 7.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-xen-develUpgrade python-perfUpgrade kernel-PAEUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-docUpgrade kernelUpgrade kernel-PAE-develUpgrade perf | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-sourceUpgrade ext4dev-kmp-defaultUpgrade kernel-traceUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64-develUpgrade btrfs-kmp-paeUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade btrfs-kmp-xenUpgrade kernel-xen-extraUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade kernel-desktop-develUpgrade kernel-default-baseUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-baseUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade kernel-pae-extraUpgrade ext4dev-kmp-ppc64Upgrade btrfs-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-default-manUpgrade hyper-v-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade kernel-default | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-openvz | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub