The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2016-05-23T10:00:00
Updated: 2016-11-25T20:57:01
Reserved: 2016-05-04T00:00:00
Link: CVE-2016-4482
JSON object: View
NVD Information
Status : Modified
Published: 2016-05-23T10:59:00.113
Modified: 2023-09-12T14:55:31.563
Link: CVE-2016-4482
JSON object: View
Redhat Information
No data.
CWE