NetSight
IP …
high7.5

CVE-2016-5244

The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attacker…

Impact

The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.

Affected products

VendorProductAffected versions
FedoraprojectFedora
Versions 23, 24, 22
SuseLinux Enterprise Real Time Extension
Versions 11, 12
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Server
Version 11
RedhatEnterprise Linux
Versions 6.0, 5
SuseSuse Linux Enterprise Software Development Kit
Versions 11, 12
SuseLinux Enterprise Workstation Extension
Version 12
SuseLinux Enterprise Desktop
Version 12
SuseOpensuse Leap
Version 42.1
LinuxLinux Kernel
through 4.6.3
SuseSuse Linux Enterprise Server
Version 12

Weakness classification

CWE-200

References