CVE-2010-4080: Infoleak
Description of problem: The SNDRVHDSPIOCTLGETCONFIGINFO ioctl in hdsp.c allows unprivileged users to read uninitialized kernel stack memory, because several fields of the hdspmconfiginfo structs declared on the stack are not altered or zeroed before being copied back to the user.
Reference: http://www.openwall.com/lists/oss-security/2010/10/06/6 http://lkml.org/lkml/2010/9/25/41
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
Other sources
The sndhdsphwdepioctl function in sound/pci/rme9652/hdsp.c in the L ...
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4080?
CVE-2010-4080 is considered a high severity vulnerability due to its potential to allow unprivileged users to read sensitive kernel stack memory.
Who is affected by CVE-2010-4080?
CVE-2010-4080 affects users of specific Linux kernel versions, including 2.6.36 and earlier, across various distributions like Debian and openSUSE.
How do I fix CVE-2010-4080?
To fix CVE-2010-4080, it is recommended to upgrade to a patched version of the Linux kernel that addresses this vulnerability.
What type of vulnerability is CVE-2010-4080?
CVE-2010-4080 is an information disclosure vulnerability that arises from uninitialized memory being returned to user space.
Can CVE-2010-4080 be exploited remotely?
CVE-2010-4080 requires local access to the vulnerable system, so it cannot be directly exploited remotely.