CVE-2004-0685

Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.

Date published : 2004-10-26

http://www.securityfocus.com/bid/10892

http://www.kb.cert.org/vuls/id/981134