Security Advisory

CVE-2014-9903

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-06-27 10:00:00
Last updated 2024-08-06 14:02:36
Assigner google_android
State PUBLISHED

Description

The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from kernel stack memory via a crafted sched_getattr system call.