NetSight
IP …
low1.9

CVE-2012-6548

The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain …

Impact

The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.5.7
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4
RedhatEnterprise Linux
Version 6.0

Weakness classification

CWE-200

References