PT-2010-5275
CVE-2010-4074
·
تاريخ النشر
2010-11-29
·
تاريخ التحديث
2020-08-10
الوصف من
CVSS 2.0
1.9
منخفضةالمقاييسAV:L/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.36-rc5
Description
The issue concerns the USB subsystem in the Linux kernel, which does not properly initialize certain structure members. This allows local users to obtain potentially sensitive information from kernel stack memory. The issue is related to vectors involving TIOCGICOUNT ioctl calls, specifically affecting the
mos7720 ioctl function in drivers/usb/serial/mos7720.c and the mos7840 ioctl function in drivers/usb/serial/mos7840.c.Recommendations
For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾