CVE-2010-4565
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2010
- Updated
- Aug 7, 2024
- Reserved
- Dec 20, 2010
Description
The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20101220 CVE request: kernel: CAN information leak, 2nd attemptmailing-list
- [netdev] 20101102 Re: [SECURITY] CAN info leak/minor heap overflowmailing-list
- [netdev] 20101109 Re: [PATCH] Fix CAN info leak/minor heap overflowmailing-list
- [oss-security] 20101220 Re: CVE request: kernel: CAN information leak, 2nd attemptmailing-list
- [oss-security] 20101104 Re: CVE request: kernel: CAN information leakmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=664544
- [netdev] 20101110 Re: [PATCH] Fix CAN info leak/minor heap overflowmailing-list
- [netdev] 20101102 [SECURITY] CAN info leak/minor heap overflowmailing-list
- 44661vdb-entry
- MDVSA-2011:029vendor-advisory
- [oss-security] 20101103 CVE request: kernel: CAN information leakmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.