CVE-2010-4080 in Linux Kernel
Summary
The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call.
Reservation
10/25/2010
Disclosure
11/30/2010
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55568 | Linux Kernel snd_hdsp_hwdep_ioctl information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2010-4080 |