PT-2012-1547 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39.4 Description: The issue is related to the osf getsysinfo function in the Linux kernel, which does not properly restrict the data size for GSI GET HWRPB operations. This allows local users to obtain...

kernel: /proc/PID/io infoleak

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc//io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password...