PT-2010-5275 · Linux+1 · Linux Kernel+1
Dan Rosenberg
·
Publicado
2010-11-29
·
Atualizado
2020-08-10
·
CVE-2010-4074
CVSS v2.0
1.9
Baixa
| Vetor | AV:L/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.36-rc5
Description
The issue concerns the USB subsystem in the Linux kernel, which does not properly initialize certain structure members. This allows local users to obtain potentially sensitive information from kernel stack memory. The issue is related to vectors involving TIOCGICOUNT ioctl calls, specifically affecting the
mos7720 ioctl function in drivers/usb/serial/mos7720.c and the mos7840 ioctl function in drivers/usb/serial/mos7840.c.Recommendations
For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat