PT-2013-3563
CVE-2013-2148
·
تاريخ النشر
2013-06-07
·
تاريخ التحديث
2023-02-13
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.9.4
Description
The issue concerns the
fill event metadata function in fs/notify/fanotify/fanotify user.c, which fails to initialize a certain structure member. This allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.Recommendations
For Linux kernel versions through 3.9.4, update to a version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾