Description
Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | kernel-image-sparc-2.4 | 26woody1 | DSA-1070-1 |
| Debian 3.0 | kernel-patch-2.4.19-mips | 2.4.19-0.020911.1.woody5 | DSA-1070-1 |
| Debian 3.0 | kernel-source-2.4.16 | 2.4.16-1woody2 | DSA-1067-1 |
| Debian 3.0 | kernel-source-2.4.17 | 2.4.17-1woody4 | DSA-1082-1 |
| Debian 3.0 | kernel-source-2.4.18 | 2.4.18-14.4 | DSA-1069-1 |
| Debian 3.0 | kernel-source-2.4.19 | 2.4.19-4.woody3 | DSA-1070-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kernel +8 | 2.4.21-15.EL | RHSA-2004:188 |
Advisories 5
- RHSA-2004:188 Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 2 Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1082-1 kernel-source-2.4.17 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1067-1 kernel-source-2.4.16 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1069-1 kernel-source-2.4.18 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1070-1 kernel-source-2.4.19 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20163 third-party-advisory
- linux-rtc-memory-leak(13943) vdb-entry
- oval:org.mitre.oval:def:1013 vdb-entry signature
- 10533 third-party-advisory
- DSA-1082 vendor-advisory
- SuSE-SA:2003:049 vendor-advisory
- 1008594 vdb-entry
- RHSA-2003:417 vendor-advisory
- 10537 third-party-advisory
- CLA-2004:799 vendor-advisory
- 10583 third-party-advisory
- 9154 vdb-entry
- FEDORA-2003-046 vendor-advisory
- 10538 third-party-advisory
- DSA-1070 vendor-advisory
- 20162 third-party-advisory
- 20040112 SmoothWall Project Security Advisory SWP-2004:001 mailing-list
- RHSA-2004:188 vendor-advisory
- DSA-1067 vendor-advisory
- oval:org.mitre.oval:def:859 vdb-entry signature
- DSA-1069 vendor-advisory
- oval:org.mitre.oval:def:9406 vdb-entry signature
- ESA-20040105-001 vendor-advisory
- 20202 third-party-advisory
- 10582 third-party-advisory
- 10555 third-party-advisory
- 10536 third-party-advisory
- 3317 vdb-entry
- MDKSA-2004:001 vendor-advisory
- 20338 third-party-advisory