Описание
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.
Ссылки
- Issue TrackingPatchThird Party Advisory
- Release Notes
- Mailing ListThird Party Advisory
- Issue Tracking
- Issue TrackingPatchThird Party Advisory
- Issue TrackingPatchThird Party Advisory
- Release Notes
- Mailing ListThird Party Advisory
- Issue Tracking
- Issue TrackingPatchThird Party Advisory
Уязвимые конфигурации
EPSS
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
Связанные уязвимости
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the L ...
The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.
ALT-PU-2016-2022: package `kernel-image-un-def` update to version 4.7.5-alt1
EPSS
5.5 Medium
CVSS3
2.1 Low
CVSS2