The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
CVSS Details
- CVSS 3.1 Base Score: 7.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-firmwareUpgrade kernelUpgrade perfUpgrade kernel-PAE-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-ppc64Upgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-trace-baseUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-pae-extraUpgrade kernel-desktop-develUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade hyper-v-kmp-paeUpgrade kernel-symsUpgrade kernel-ppc64Upgrade ext4dev-kmp-paeUpgrade kernel-xen-extraUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-ppc64-develUpgrade btrfs-kmp-xenUpgrade kernel-traceUpgrade ext4dev-kmp-defaultUpgrade btrfs-kmp-paeUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-ec2 | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-sparc64 | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub