CVE-2012-3430: Infoleak
Last updated 24 July 2024
Other sources
The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
— Launchpad
Two similar issues:
1) Reported by Jay Fenlason and Doug Ledford: recvfrom() on an RDS socket can disclose sizeof(struct sockaddrstorage)-sizeof(struct sockaddrin) bytes of kernel stack to userspace when receiving a datagram.
2) Reported by Jay Fenlason: recv{from,msg}() on an RDS socket can disclose sizeof(struct sockaddrstorage) bytes of kernel stack to userspace when other code paths are taken.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3430?
The severity of CVE-2012-3430 has been rated as moderate, as it allows local users to access potentially sensitive information.
How do I fix CVE-2012-3430?
To fix CVE-2012-3430, upgrade your Linux kernel to version 3.0.44 or later.
Which Linux kernel versions are affected by CVE-2012-3430?
CVE-2012-3430 affects all Linux kernel versions before 3.0.44.
What specific function is responsible for the vulnerability in CVE-2012-3430?
The vulnerability in CVE-2012-3430 is due to the rds_recvmsg function not properly initializing a structure member.
Who is primarily affected by CVE-2012-3430?
Local users with access to the system are primarily affected by CVE-2012-3430.