CVE-2010-2942: Medium severity Linux Linux kernel vulnerability
Description of problem: We leak at least 32bits of kernel memory to user land in tc dump, because we dont init all fields (capab ?) of the dumped structure.
Use C99 initializers so that holes and non explicit fields are zeroed.
http://patchwork.ozlabs.org/patch/61857/
Other sources
The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcfgactdump function in net/sched/actgact.c, (2) the tcfmirreddump function in net/sched/actmirred.c, (3) the tcfnatdump function in net/sched/actnat.c, (4) the tcfsimpdump function in net/sched/actsimple.c, and (5) the tcfskbeditdump function in net/sched/actskbedit.c.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2942?
CVE-2010-2942 has been classified as a high severity vulnerability due to the potential leak of sensitive kernel memory to user land.
How do I fix CVE-2010-2942?
To fix CVE-2010-2942, it's recommended to update your Linux kernel to a version where this vulnerability has been patched.
What systems are affected by CVE-2010-2942?
CVE-2010-2942 affects various Linux kernel versions up to 2.6.36 and several distributions including Debian, Ubuntu, and openSUSE.
What is the impact of exploiting CVE-2010-2942?
Exploiting CVE-2010-2942 could allow attackers to read sensitive information from kernel memory, potentially leading to further attacks.
Is there a workaround for CVE-2010-2942?
There are no specific workarounds for CVE-2010-2942; upgrading to a secure kernel version is the primary mitigation.