CVE-2010-4078: Low severity Linux Linux kernel vulnerability
Description of problem: The FBIOGETVBLANK device ioctl in sismain.c allows unprivileged users to read 16 bytes of uninitialized stack memory, because the 'reserved' member of the fbvblank struct declared on the stack is not altered or zeroed before being copied back to the user.
Reference: http://www.openwall.com/lists/oss-security/2010/10/06/6 http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03385.html
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The sisfbioctl function in drivers/video/sis/sismain.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGETVBLANK ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4078?
CVE-2010-4078 is classified as a medium severity vulnerability due to its potential for exposing sensitive data.
How do I fix CVE-2010-4078?
To fix CVE-2010-4078, users should update to a patched version of the Linux kernel that addresses this vulnerability.
Who is affected by CVE-2010-4078?
CVE-2010-4078 affects unprivileged users of specific Linux kernel versions, particularly versions up to 2.6.36.
What is the impact of CVE-2010-4078?
The impact of CVE-2010-4078 allows unprivileged users to read uninitialized stack memory, potentially exposing sensitive information.
What versions of Linux are vulnerable to CVE-2010-4078?
Versions of Linux kernel prior to 2.6.36, including release candidates, are vulnerable to CVE-2010-4078.