PT-2011-1619 · Linux+1 · Linux Kernel+1

Kees Cook

·

Published

2011-02-16

·

Updated

2023-02-13

·

CVE-2010-4655

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36
Description The issue allows local users to obtain potentially sensitive information from kernel heap memory. This is possible by leveraging the CAP NET ADMIN capability for an ethtool ioctl call, due to the failure to initialize certain data structures in net/core/ethtool.c.
Recommendations For Linux kernel versions prior to 2.6.36, update to version 2.6.36 or later to resolve the issue.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2010-4655
DSA-2264-1
RHSA-2011:0263
RHSA-2011:0303
RHSA-2011:0330
RHSA-2011:0421
RHSA-2011_0263
RHSA-2011_0303
RHSA-2011_0421

Affected Products

Linux Kernel
Red Hat