Security Advisory

CVE-2010-4078

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-11-29 15:00:00
Last updated 2024-08-07 03:34:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.