Security Advisory

CVE-2012-4467

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-10-10 21:00:00
Last updated 2024-08-06 20:35:09
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a crafted ioctl call.