CVE-2014-4027 in Linux Kernel
Résumé (Anglaise)
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.
Réserver
11/06/2014
Divulgation
23/06/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 65958 | Linux Kernel rd_build_device_space élévation de privilèges | 264 | Non prouvée | Correctif officiel | CVE-2014-4027 |