NetSight
IP …
medium4.9

CVE-2013-4515

The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local u…

Impact

The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTL_BCM_GET_DEVICE_DRIVER_INFO ioctl call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.11.7
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4

Weakness classification

CWE-200

References