Security Advisory

CVE-2013-1928

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-04-29 10:00:00
Last updated 2024-08-06 15:20:37
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.