NetSight
IP …
low2.1Public exploit code

CVE-2010-4158

The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized befor…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.36.2
FedoraprojectFedora
Version 13
OpensuseOpensuse
Versions 11.2, 11.3
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Real Time Extension
Version 11
SuseLinux Enterprise Server
Versions 9, 10, 11
SuseLinux Enterprise Software Development Kit
Version 10

Weakness classification

CWE-200

References