NetSight
IP …
low1.9

CVE-2012-6549

The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local user…

Impact

The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.5.7
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4

Weakness classification

CWE-200

References