Information Disclosure

kernel-rt is vulnerable to information disclosure. The vulnerability exists as the rtnlfillifinfo function in net/core/rtnetlink.c does not initialize a certain structure member...

CVE-2013-2635

The CVE-2013-2635 issue affects the Linux kernel’s rtnetlink path: rtnl_fill_ifinfo in net/core/rtnetlink.c does not initialize a structure member, enabling a local attacker to read kernel stack memory. The vulnerability is associated with Linux kernel versions prior to 3.8.4; the documented fix ...