CVE-2016-5244 in Oracle Solaris

Summary

The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.

Reservation

06/03/2016

Disclosure

06/27/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
125630	Oracle Solaris Kernel information disclosure	200	Not defined	Official fix	CVE-2016-5244
88376	Linux Kernel RDS Message recv.c rds_inc_info_copy Memory information disclosure	200	Not defined	Official fix	CVE-2016-5244