kernel: information disclosure
| Package(s): | kernel |
CVE #(s): | CVE-2017-5967
|
| Created: | February 21, 2017 |
Updated: | February 22, 2017 |
| Description: |
From the CVE entry:
The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c. |
| Alerts: |
|
