Information disclosure in Linux Kernel

CVE-2012-4530

The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.5th percentile) — read the EPSS interpretation.