The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2010-11-30 22:14
Updated : 2024-02-04 17:54
NVD link : CVE-2010-4082
Mitre link : CVE-2010-4082
CVE.ORG link : CVE-2010-4082
JSON object : View
Products Affected
suse
- linux_enterprise_real_time_extension
- linux_enterprise_server
- linux_enterprise_desktop
opensuse
- opensuse
linux
- linux_kernel
CWE
CWE-909
Missing Initialization of Resource