Linux Distros Unpatched Vulnerability : CVE-2021-47297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fix uninit-value in caifseqpktsendmsg When nrsegs equal to zero in iovecfromuser, the object msg-msgiter.iov is uninit stack memory in caifseqpktsendmsg...

PT-2021-25874

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.14.240 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35...

PT-2021-29626

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.13.5 Description The issue is related to an uninit-value in the caif seqpkt sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29778

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.4.135 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-29903

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.277 Description The issue is related to an uninit-value in the caif seqpkt sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-25845

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25939

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.4.276 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-25715

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.10.53 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-29710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.10.53 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-25908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.9.276 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-29869

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.14.240 Description The issue is related to an uninit-value in the caif seqpkt sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-29840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.199 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25783

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 5.4.135 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-29934

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.35 through 4.4.276 Description The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.35 throu...

PT-2021-25631

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.35 through 5.13.5 Description: The issue is related to an uninit-value in caif seqpkt sendmsg. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 2.6.35...

Design/Logic Flaw

The caifseqpktrecvmsg function in net/caif/caifsocket.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...