Description
The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.12.6-1 | — |
| Debian 13 | linux | 3.12.6-1 | — |
| Debian 12 | linux | 3.12.6-1 | — |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze5 | DSA-2906-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +16 | 2.6.32-431.5.1.el6 | RHSA-2014:0159 |
| RHEL 5 | kernel +11 | 2.6.18-371.6.1.el5 | RHSA-2014:0285 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +10 | 3.10.33-rt32.33.el6rt | RHSA-2014:0439 |
Advisories 4
- RHSA-2014:0159 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2014:0285 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2906-1 linux-2.6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2014:0439 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jan 7, 2026
References
- USN-2135-1 vendor-advisory
- RHSA-2014:0159 vendor-advisory
- USN-2138-1 vendor-advisory
- USN-2108-1 vendor-advisory
- RHSA-2014:0285 vendor-advisory
- USN-2113-1 vendor-advisory
- USN-2141-1 vendor-advisory
- SUSE-SU-2015:0736 vendor-advisory
- USN-2110-1 vendor-advisory
- [oss-security] 20140107 oss-sec: CVE split and a missed file mailing-list
- USN-2136-1 vendor-advisory
- SUSE-SU-2015:0652 vendor-advisory
- USN-2139-1 vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4
- https://github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69
- USN-2117-1 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1035875
- SUSE-SU-2015:0481 vendor-advisory
- 56036 third-party-advisory
- openSUSE-SU-2015:0566 vendor-advisory
- USN-2109-1 vendor-advisory
- SUSE-SU-2014:0459 vendor-advisory
- USN-2107-1 vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69
- [oss-security] 20131128 Re: CVE Request: Linux kernel: net: uninitialised memory leakage mailing-list
- 55882 third-party-advisory