[oss-security] CVE-2014-1739: Kernel Infoleak vulnerability in,media_enum_entities()

Hi, We found an infoleak vulnerability in the ioctl mediaenumentities that allows to disclose 200 bytes the kernel process' stack. The vulnerability is exploitable on versions up to linux-3.15-rc3 by local users with read access to /dev/media0. Linux distributions ship with chmod 600 /dev/media0...

PT-2014-4314

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.14.6 Description The issue allows local users to obtain sensitive information from kernel memory. This is possible due to the media device enum entities function in drivers/media/media-device.c not initializing...