CVE-2010-4079: Infoleak
Description of problem: The FBIOGETVBLANK device ioctl in ivtvfb.c allows unprivileged users to read 16 bytes of uninitialized stack memory, because the 'reserved' member of the fbvblank struct declared on the stack is not altered or zeroed before being copied back to the user.
Reference: http://www.openwall.com/lists/oss-security/2010/10/06/6 http://lkml.org/lkml/2010/9/15/393
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The ivtvfbioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGETVBLANK ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4079?
CVE-2010-4079 has been classified as a moderate severity vulnerability.
How do I fix CVE-2010-4079?
To mitigate CVE-2010-4079, it is recommended to apply the kernel patches provided by the Linux distribution.
Which systems are affected by CVE-2010-4079?
CVE-2010-4079 affects Linux kernel versions prior to 2.6.36, including specific release candidates.
Can unprivileged users exploit CVE-2010-4079?
Yes, CVE-2010-4079 allows unprivileged users to read sensitive data from uninitialized stack memory.
What is a potential impact of CVE-2010-4079?
The potential impact of CVE-2010-4079 includes information disclosure from uninitialized memory.