CVE-2010-4078

Fixed in a distro release EPSS <1%

The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.

Published 2010-11-29 · CVE record · OSV

Products: linux_kernel, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_real_time_extension, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, debian_linux

Distro releases