NetSight
IP …
high7.5

CVE-2016-4485

The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain s…

Impact

The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.

Affected products

VendorProductAffected versions
NovellSuse Linux Enterprise Software Development Kit
Version 11.0
NovellSuse Linux Enterprise Debuginfo
Version 11
NovellSuse Linux Enterprise Server
Version 11
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
LinuxLinux Kernel
through 4.5.4

Weakness classification

CWE-200

References