CVE-2010-4075

The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Date published : 2010-11-29

http://www.securityfocus.com/bid/43806

http://www.securityfocus.com/archive/1/520102/100/0/threaded