Vulnerability in Linux Kernel

CVE-2011-2208

Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call.

EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel — versions 2.6.39, 2.6.39.1, 2.6.39.2
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)
secalert@redhat.com (x_refsource_CONFIRM)