1 matches found
kernel: In pfkey_dump() dplen and splen can both be specified to access the xfrm_address_t structure out of bounds
A flaw was found in the way the Linux kernel's pfkeydump function trusted the provided filter size parameters. A local, sufficiently privileged user could use this flaw to leak information from the kernel...