PT-2010-4718 · Linux+1 · Linux Kernel+1
Dan Rosenberg
·
Published
2010-09-30
·
Updated
2024-06-15
·
CVE-2010-3298
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.36-rc5
Description
The issue is related to the
hso get count function in the Linux kernel, which does not properly initialize a certain structure member. This allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.Recommendations
For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue. As a temporary workaround, consider restricting access to the TIOCGICOUNT ioctl call to minimize the risk of exploitation.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat