Linux Kernel net/Subsystem Multiple Local Information Leakage Vulnerability

Linux Kernel net/Subsystem Multiple Local Information Leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel 2.6.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 44630

Linux Kernel is the Kernel used by open source Linux.

In the net/subsystem of Linux Kernel, The ax25_getname () function under the net/ax25/af_ax25.c file and the packet_getname_spkt () and packet_getname () files under the net/ax25.c file () the function copies some structure members to the user space without correctly initializing them, which may cause leakage of the kernel stack memory.

<* Source: Vasiliy Kulikov

Link: http://secunia.com/advisories/42061/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://permalink.gmane.org/gmane.linux.network/176803
Http://permalink.gmane.org/gmane.linux.network/176804