CVE-2010-3078: Infoleak
Description of problem: The XFSIOCFSGETXATTR ioctl allows unprivileged users to read 12 bytes of uninitialized stack memory, because the fsxattr struct declared on the stack in xfsiocfsgetxattr() does not alter (or zero) the 12-byte fsxpad member before copying it back to the user.
http://www.linux.sgi.com/archives/xfs-masters/2010-09/msg00002.html
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The xfsiocfsgetxattr function in fs/xfs/linux-2.6/xfsioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3078?
CVE-2010-3078 is classified as a medium severity vulnerability.
What is affected by CVE-2010-3078?
CVE-2010-3078 affects specific versions of the Linux kernel and several Linux distributions.
How do I fix CVE-2010-3078?
To fix CVE-2010-3078, you should update your system to a patched version of the Linux kernel.
What are the potential impacts of CVE-2010-3078?
CVE-2010-3078 allows unprivileged users to read uninitialized stack memory, potentially leading to information disclosure.
Who is at risk due to CVE-2010-3078?
Users running vulnerable versions of Linux kernel-based systems are at risk due to CVE-2010-3078.