CVE-2010-3875: Infoleak
Description of problem: Sometimes ax25getname() doesn't initialize all members of fsadigipeater field of fsa struct. This structure is then copied to userland. It leads to leaking of contents of kernel stack memory. We have to initialize them to zero.
Reference: http://marc.info/?l=linux-netdev&m=128854507120898&w=2 http://seclists.org/oss-sec/2010/q4/94
Acknowledgements:
Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting this issue.
Other sources
The ax25getname function in net/ax25/afax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3875?
CVE-2010-3875 is considered a high severity vulnerability due to the potential exposure of sensitive kernel stack memory.
How do I fix CVE-2010-3875?
To fix CVE-2010-3875, ensure that you upgrade to the patched version of the Linux kernel, specifically versions after 2.6.37.
What type of vulnerability is CVE-2010-3875?
CVE-2010-3875 is a memory leak vulnerability that occurs in the ax25_getname() function within the Linux kernel.
Which software is affected by CVE-2010-3875?
CVE-2010-3875 affects Linux kernel versions up to 2.6.37 and includes Linux distributions like Debian 5.0.
Does CVE-2010-3875 affect user data?
Yes, CVE-2010-3875 can lead to leakage of sensitive data from the kernel stack to user space, potentially exposing user data.