NetSight
low1.9

CVE-2012-6546

The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from ker…

Impact

The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.5.7
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4
RedhatEnterprise Linux
Versions 5, 6.0

Weakness classification

References