Ubuntu
linux package

  1. Bug #706149
  2. Comment #0

Comment 0 for bug 706149

Revision history for this message
Brad Figg (brad-figg) wrote :

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly
initialize certain structure members, which allows local users to obtain
potentially sensitive information from kernel stack memory via vectors
related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in
drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in
drivers/usb/serial/mos7840.c.