Tracker / CVE-2010-3078
CVE-2010-3078
Medium 5.5
The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| linux | linux_kernel |
| linux | linux_kernel · … → 2.6.35.4 |
| opensuse | opensuse |
| suse | suse_linux_enterprise_desktop |
| suse | suse_linux_enterprise_server |
| vmware | esx |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.