REDHAT-BUG-862877: Low severity red hat linux vulnerability
Published Oct 3, 2012
·Updated
Description of the problem: The uname() syscall since 3.0 with the UNAME26 personality leaks kernel stack memory contents.
Acknowledgements:
Red Hat would like to thank Kees Cook for reporting this issue.
Affected Software
1 affected component
Red Hat Linux Kernel>=3.0
Event History
Oct 3, 2012
Data Sourced
via Red Hat·07:58 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-862877?
REDHAT-BUG-862877 is considered a medium severity vulnerability due to its potential to leak sensitive kernel stack memory contents.
2
How do I fix REDHAT-BUG-862877?
To fix REDHAT-BUG-862877, you should update your Red Hat Linux Kernel to a version that contains the patch addressing this vulnerability.
3
What versions are affected by REDHAT-BUG-862877?
REDHAT-BUG-862877 affects all Red Hat Linux Kernel versions from 3.0 onwards.
4
What could be the impact of exploiting REDHAT-BUG-862877?
Exploiting REDHAT-BUG-862877 may allow an attacker to access sensitive information stored in kernel stack memory.
5
Who reported REDHAT-BUG-862877?
REDHAT-BUG-862877 was reported by Kees Cook.