CVE-2005-3276
- State
- Published
- Severity
- Not scored
- Published
- Oct 20, 2005
- Updated
- Aug 7, 2024
- Reserved
- Oct 20, 2005
Description
The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:9748vdb-entrysignature
- 18056third-party-advisory
- MDKSA-2005:220vendor-advisory
- RHSA-2006:0144vendor-advisory
- RHSA-2006:0101vendor-advisory
- 15527vdb-entry
- http://lkml.org/lkml/2005/8/3/36
- FLSA:157459-2vendor-advisory
- DSA-922vendor-advisory
- USN-219-1vendor-advisory
- 18510third-party-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=71ae18ec690953e9ba7107c7cc44589c2cc0d9f1
- MDKSA-2005:218vendor-advisory
- FLSA:157459-1vendor-advisory
- 17826third-party-advisory
- FLSA:157459-3vendor-advisory
- MDKSA-2005:219vendor-advisory
- 19252third-party-advisory
- http://linux.bkbits.net:8080/linux-2.6/cset%4042e81864gSEM90Oun0jA8dufpM3inw
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.