Veracode Vulnerability DatabaseVERACODE:24292Information Disclosure
0.001 Low
EPSS
Percentile
20.3%
kernel is vulnerable to information disclosure. Information leak flaws were found in the Linux kernelâs Traffic Control Unit implementation. A local attacker could use these flaws to cause the kernel to leak kernel memory to user-space, possibly leading to the disclosure of sensitive information.
References
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.5_Technical_Notes/kernel.html#id3512212
git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8
git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git;a=commit;h=1c40be12f7d8ca1d387510d39787b12e512a7ce8
lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html
lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
patchwork.ozlabs.org/patch/61857/
secunia.com/advisories/41512
secunia.com/advisories/46397
support.avaya.com/css/P8/documents/100113326
www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2
www.openwall.com/lists/oss-security/2010/08/18/1
www.openwall.com/lists/oss-security/2010/08/19/4
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2010-0723.html
www.redhat.com/support/errata/RHSA-2010-0771.html
www.redhat.com/support/errata/RHSA-2010-0779.html
www.securityfocus.com/archive/1/520102/100/0/threaded
www.securityfocus.com/bid/42529
www.ubuntu.com/usn/USN-1000-1
www.vmware.com/security/advisories/VMSA-2011-0012.html
www.vupen.com/english/advisories/2010/2430
www.vupen.com/english/advisories/2011/0298
access.redhat.com/errata/RHSA-2010:0723
access.redhat.com/errata/RHSA-2010:0771
access.redhat.com/errata/RHSA-2010:0779
access.redhat.com/security/cve/CVE-2010-2942
bugzilla.redhat.com/show_bug.cgi?id=624903
Related
