imPC@ndo IT

Tracker / CVE-2010-4082

CVE-2010-4082

Low 1.9

The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call.

Affected products and versions

linux linux_kernel
linux linux_kernel · … → 2.6.36
opensuse opensuse
suse linux_enterprise_desktop
suse linux_enterprise_real_time_extension
suse linux_enterprise_server

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References