CVE-2010-4565
29.12.2010, 18:00
The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.Enginsight
Vendor | Product | Version |
---|---|---|
linux | linux_kernel | 𝑥 ≤ 2.6.36 |
𝑥
= Vulnerable software versions

Ubuntu Releases
Ubuntu Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
linux |
| ||||||||||||
linux-ec2 |
| ||||||||||||
linux-fsl-imx51 |
| ||||||||||||
linux-lts-backport-maverick |
| ||||||||||||
linux-lts-backport-natty |
| ||||||||||||
linux-mvl-dove |
| ||||||||||||
linux-source-2.6.15 |
| ||||||||||||
linux-ti-omap4 |
|
Common Weakness Enumeration
References