CVE-2013-2148

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.9.4

Description The issue concerns the fill event metadata function in fs/notify/fanotify/fanotify user.c, which fails to initialize a certain structure member. This allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.

Recommendations For Linux kernel versions through 3.9.4, update to a version that contains a fix for this issue.