CVE-2011-2209: Undefined Security Weakness

Integer signedness error in the osfsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...

CVE-2011-2210: Undefined Security Weakness

The osfgetsysinfo function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restrict the data size for GSIGETHWRPB operations, which allows local users to obtain sensitive information from kernel memory via a crafted call...