The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel prior to 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
linux linux kernel 2.6.36 |
||
linux linux kernel |
||
opensuse opensuse 11.1 |
||
opensuse opensuse 11.3 |
||
suse suse linux enterprise server 11 |
||
suse suse linux enterprise desktop 11 |
||
canonical ubuntu linux 10.10 |
||
canonical ubuntu linux 9.04 |
||
canonical ubuntu linux 9.10 |
||
canonical ubuntu linux 10.04 |
||
canonical ubuntu linux 8.04 |
||
canonical ubuntu linux 6.06 |
||
vmware esx 4.1 |
||
vmware esx 4.0 |