CVE-2010-0003

kernel: infoleak if print-fatal-signals=1

Published Jan 26, 2010 CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1996-1 New Linux 2.6.26 packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0035 The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.
Ubuntu USN Ubuntu USN USN-894-1 Linux kernel vulnerabilities
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:30 AM
Reserved
Dec 14, 2009, 12:00 AM
Status
Modified
Published
Jan 26, 2010, 6:30 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Moderate
Public date
Jan 8, 2010, 12:00 AM