CVE-2010-3078
- State
- Published
- Severity
- Not scored
- Published
- Sep 21, 2010
- Updated
- Aug 7, 2024
- Reserved
- Aug 20, 2010
Description
The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20100907 CVE request: kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leakmailing-list
- USN-1000-1vendor-advisory
- SUSE-SA:2010:041vendor-advisory
- [xfs-masters] 20100906 [PATCH] xfs: prevent reading uninitialized stack memorymailing-list
- 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Consolemailing-list
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a122eb2fdfd78b58c6dd992d6f4b1aaef667eef9
- 46397third-party-advisory
- RHSA-2011:0007vendor-advisory
- ADV-2010-2430vdb-entry
- SUSE-SA:2011:007vendor-advisory
- ADV-2011-0298vdb-entry
- SUSE-SA:2010:050vendor-advisory
- RHSA-2010:0839vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
- [oss-security] 20100907 Re: CVE request: kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leakmailing-list
- 42890third-party-advisory
- 1024418vdb-entry
- 41284third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=630804
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc4
- SUSE-SA:2010:054vendor-advisory
- 43022vdb-entry
- 41512third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.