NetSight
IP …
medium4.9

CVE-2013-4516

The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows loca…

Impact

The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.11.7
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4

Weakness classification

CWE-200

References