Security Advisory

CVE-2011-1078

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-06-21 23:00:00
Last updated 2024-08-06 22:14:27
Assigner redhat
State PUBLISHED

Description

The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.