CVE-2010-4077 in Kernel
Summary
The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
10/25/2010
Disclosure
11/29/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55562 | Linux Kernel ntty_ioctl_tiocgicount information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2010-4077 |