| Severity : |
Medium
|
| Published : |
2010-09-30
|
| Modified : |
2012-03-19
|
| Base Score : |
4.9
|
| Details : |
The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
|
| Product/Version : |
CGE 5.x
Mobilinux 5.x
Professional PRO 5.0.24
|
|