Description
The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call.
References
- openSUSE-SU-2013:1187 vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c802d759623acbd6e1ee9fbdabae89159a513913
- FEDORA-2013-6537 vendor-advisory
- MDVSA-2013:176 vendor-advisory
- FEDORA-2013-6999 vendor-advisory
- [linux-kernel] 20130414 Linux 3.9-rc7 mailing-list
- [oss-security] 20130414 Linux kernel: more net info leak fixes for v3.9 mailing-list
- openSUSE-SU-2013:1971 vendor-advisory
- https://github.com/torvalds/linux/commit/c802d759623acbd6e1ee9fbdabae89159a513913
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3ce5efad47b62c57a4f5c54248347085a750ce0e
- https://github.com/torvalds/linux/commit/3ce5efad47b62c57a4f5c54248347085a750ce0e
- SUSE-SU-2013:1182 vendor-advisory