CVE-2013-6392
First published: Sat Nov 30 2013(Updated: )
The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Codeaurora Android-msm | =3.2.54 | |
| Codeaurora Android-msm | =3.4.72 | |
| Codeaurora Android-msm | =3.4.73 | |
| Codeaurora Android-msm | =3.4.74 | |
| Codeaurora Android-msm | =3.4.75 | |
| Codeaurora Android-msm | =3.4.76 | |
| Codeaurora Android-msm | =3.4.77 | |
| Codeaurora Android-msm | =3.4.78 | |
| Codeaurora Android-msm | =3.4.79 | |
| Codeaurora Android-msm | =3.10.22 | |
| Codeaurora Android-msm | =3.10.23 | |
| Codeaurora Android-msm | =3.10.24 | |
| Codeaurora Android-msm | =3.10.25 | |
| Codeaurora Android-msm | =3.10.26 | |
| Codeaurora Android-msm | =3.10.27 | |
| Codeaurora Android-msm | =3.10.28 | |
| Codeaurora Android-msm | =3.10.29 | |
| Codeaurora Android-msm | =3.12.3 | |
| Codeaurora Android-msm | =3.12.4 | |
| Codeaurora Android-msm | =3.12.5 | |
| Codeaurora Android-msm | =3.12.6 | |
| Codeaurora Android-msm | =3.12.7 | |
| Codeaurora Android-msm | =3.12.8 | |
| Codeaurora Android-msm | =3.12.9 | |
| Codeaurora Android-msm | =3.12.10 | |
| Codeaurora Android-msm | =3.13 | |
| Codeaurora Android-msm | =3.13-rc1 | |
| Codeaurora Android-msm | =3.13-rc2 | |
| Codeaurora Android-msm | =3.13-rc3 | |
| Codeaurora Android-msm | =3.13-rc4 | |
| Codeaurora Android-msm | =3.13-rc5 | |
| Codeaurora Android-msm | =3.13-rc6 | |
| Codeaurora Android-msm | =3.13-rc7 | |
| Codeaurora Android-msm | =3.13-rc8 | |
| Codeaurora Android-msm | =3.13.1 | |
| Codeaurora Android-msm | =3.13.2 | |
| Codeaurora Android-msm | =3.14-rc1 | |
| Codeaurora Android-msm | =3.14-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/tags
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/codeaurora
- canonical/codeaurora android-msm
- version/codeaurora android-msm/3.2.54
- version/codeaurora android-msm/3.4.72
- version/codeaurora android-msm/3.4.73
- version/codeaurora android-msm/3.4.74
- version/codeaurora android-msm/3.4.75
- version/codeaurora android-msm/3.4.76
- version/codeaurora android-msm/3.4.77
- version/codeaurora android-msm/3.4.78
- version/codeaurora android-msm/3.4.79
- version/codeaurora android-msm/3.10.22
- version/codeaurora android-msm/3.10.23
- version/codeaurora android-msm/3.10.24
- version/codeaurora android-msm/3.10.25
- version/codeaurora android-msm/3.10.26
- version/codeaurora android-msm/3.10.27
- version/codeaurora android-msm/3.10.28
- version/codeaurora android-msm/3.10.29
- version/codeaurora android-msm/3.12.3
- version/codeaurora android-msm/3.12.4
- version/codeaurora android-msm/3.12.5
- version/codeaurora android-msm/3.12.6
- version/codeaurora android-msm/3.12.7
- version/codeaurora android-msm/3.12.8
- version/codeaurora android-msm/3.12.9
- version/codeaurora android-msm/3.12.10
- version/codeaurora android-msm/3.13
- version/codeaurora android-msm/3.13-rc1
- version/codeaurora android-msm/3.13-rc2
- version/codeaurora android-msm/3.13-rc3
- version/codeaurora android-msm/3.13-rc4
- version/codeaurora android-msm/3.13-rc5
- version/codeaurora android-msm/3.13-rc6
- version/codeaurora android-msm/3.13-rc7
- version/codeaurora android-msm/3.13-rc8
- version/codeaurora android-msm/3.13.1
- version/codeaurora android-msm/3.13.2
- version/codeaurora android-msm/3.14-rc1
- version/codeaurora android-msm/3.14-rc2