Lucene search

K
cvelistRedhatCVELIST:CVE-2013-2148
HistoryJun 07, 2013 - 10:00 a.m.

CVE-2013-2148

2013-06-0710:00:00
redhat
www.cve.org
5

AI Score

8

Confidence

High

EPSS

0

Percentile

5.1%

The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.