|
|
|
 |
Vulnerability Note VU#981134Linux kernel USB drivers do not initialize kernel memory properlyOverviewVarious Linux USB drivers contain an information disclosure vulnerability that may expose sensitive segments of kernel memory to users.I. DescriptionUSB drivers for several versions the Linux kernel do not properly initialize kernel memory before using it. When an affected USB driver copies uninitialized memory from kernel space to user space (with the copy_to_user function), the previous kernel memory contents will be copied as well. In some cases, this will grant a user inappropriate access to sensitive segments of kernel memory.II. ImpactUsers may be able to view sensitive segments of kernel memory.III. SolutionCheck with VendorUsers who suspect they are vulnerable are encouraged to check with their vendor to determine the appropriate action to take.
References
This vulnerability was reported by Tim Yamin. This document was written by Jeff Gennari.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Get Adobe Reader