CVE-2010-3297

kernel: drivers/net/eql.c: reading uninitialized stack memory

Published Sep 30, 2010 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2126-1 New Linux 2.6.26 packages fix several issues
EUVD EUVD EUVD-2010-3296 The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.
Ubuntu USN Ubuntu USN USN-1041-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1057-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1072-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1074-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1074-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1083-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1093-1 Linux Kernel vulnerabilities (Marvell Dove)
Ubuntu USN Ubuntu USN USN-1202-1 Linux kernel (OMAP4) vulnerabilities
History

No history.