imPC@ndo IT

Tracker / CVE-2010-3881

CVE-2010-3881

Low 2.1

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.

Affected products and versions

linux linux_kernel · … → 2.6.36.2
redhat enterprise_linux_server
redhat enterprise_linux_workstation
suse suse_linux_enterprise_desktop
suse suse_linux_enterprise_high_availability_extension
suse suse_linux_enterprise_server

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References