CVE-2013-1928

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6.5

Description The issue is related to a lack of error checking in the do video set spu palette function, which could potentially allow local users to access sensitive information from kernel stack memory. This can be achieved through a crafted VIDEO SET SPU PALETTE ioctl call on a /dev/dvb device.

Recommendations For Linux kernel versions prior to 3.6.5, update to version 3.6.5 or later to resolve the issue.