NetSight
low1.9

CVE-2012-6542

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users…

Impact

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.5.7
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4
RedhatEnterprise Linux
Versions 5, 6.0

Weakness classification

References