The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel prior to 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
linux linux kernel 2.6.38 |
||
linux linux kernel 2.6.38.3 |
||
linux linux kernel |
||
linux linux kernel 2.6.38.6 |
||
linux linux kernel 2.6.38.1 |
||
linux linux kernel 2.6.38.5 |
||
linux linux kernel 2.6.38.2 |
||
linux linux kernel 2.6.38.4 |
||
linux linux kernel 2.6.38.7 |