CVE-2011-2210 in Linux Kernel
Summary
The osf_getsysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSI_GET_HWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/31/2011
Disclosure
06/13/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60952 | Linux Kernel osf_getsysinfo access control | 264 | Not defined | Official fix | CVE-2011-2210 |