PT-2010-5279

CVE-2010-4082

Published

2010-11-30

Updated

2020-08-13

Description by

CVSS 2.0

1.9

Low

MetricsAV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc5

Description The issue is related to the viafb ioctl get viafb info function in the Linux kernel, which does not properly initialize a certain structure member. This allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB GET INFO ioctl call.

Recommendations For Linux kernel versions prior to 2.6.36-rc5, update to version 2.6.36-rc5 or later to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-909: Missing Initialization of Resource

Related identifiers

CVE-2010-4082

RHSA-2010:0958

RHSA-2011:0007