|
|
| |
|
| |
kernel: information disclosure
| Package(s): | kernel |
CVE #(s): | CVE-2012-4467
|
| Created: | January 18, 2013 |
Updated: | January 23, 2013 |
| Description: |
From the Mageia advisory:
Commit 644595f89620 ("compat: Handle COMPAT_USE_64BIT_TIME in
net/socket.c") introduced a bug where the helper functions to take
either a 64-bit or compat time[spec|val] got the arguments in the
wrong order, passing the kernel stack pointer off as a user pointer
(and vice versa).
Because of the user address range check, that in turn then causes an
EFAULT due to the user pointer range checking failing for the kernel
address. Incorrectly resuling in a failed system call for 32-bit
processes with a 64-bit kernel.
On odder architectures like HP-PA (with separate user/kernel address
spaces), it can be used read kernel memory. |
| Alerts: |
|
( Log in to post comments)
|
|
|