CVE-2016-5244
kernel: Information leak in rds_inc_info_copy
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.
CVSS 3.0 · 7.5 High
EPSS 5.5%
KEV · Not listed
Vendors
Products