CVE-2010-3297: Low severity linux kernel vulnerability
Description of problem: http://lkml.org/lkml/2010/9/11/168 The EQLGETMASTRCFG device ioctl allows unprivileged users to read 16 bytes of uninitialized stack memory, because the "mastername" member of the masterconfigt struct declared on the stack in eqlgmastercfg() is not altered or zeroed before being copied back to the user.
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The eqlgmastercfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQLGETMASTRCFG ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3297?
CVE-2010-3297 is classified as a medium severity vulnerability.
How do I fix CVE-2010-3297?
To fix CVE-2010-3297, upgrade to a patched version of the Linux kernel that is above 2.6.36.
What is CVE-2010-3297?
CVE-2010-3297 is a vulnerability that allows unprivileged users to read uninitialized stack memory via the EQL_GETMASTRCFG device ioctl.
Which software is affected by CVE-2010-3297?
CVE-2010-3297 affects various versions of the Linux kernel, specifically versions 2.6.36 and earlier.
Can CVE-2010-3297 be exploited remotely?
CVE-2010-3297 is not typically exploited remotely as it requires local access to the affected system.