CVE-2013-2234

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.10

Description The issue affects the Linux kernel, where the key notify sa flush and key notify policy flush functions in net/key/af key.c do not properly initialize certain structure members. This allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key socket.

Recommendations For Linux kernel versions prior to 3.10, update to version 3.10 or later to resolve the issue.