|
|
| |
|
| |
kernel: information leak
| Package(s): | kernel |
CVE #(s): | CVE-2010-0003
|
| Created: | January 25, 2010 |
Updated: | March 23, 2010 |
| Description: |
From the Red Hat bugzilla entry:
When print-fatal-signals is enabled it's possible to dump any memory reachable
by the kernel to the log by simply jumping to that address from user space.
Or crash the system if there's some hardware with read side effects.
The fatal signals handler will dump 16 bytes at the execution address, which is
fully controlled by ring 3.
|
| Alerts: |
|
( Log in to post comments)
|
|
|