kernel: drivers/usb/serial/mos*.c: reading uninitialized stack memory

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the 1 mos7720ioctl function in...

PT-2010-5275

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.36-rc5 Description The issue concerns the USB subsystem in the Linux kernel, which does not properly initialize certain structure members. This allows local users to obtain potentially sensitive information...