The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-10-20T04:00:00

Updated: 2024-08-07T23:10:07.144Z

Reserved: 2005-10-20T00:00:00

Link: CVE-2005-3276

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-10-21T01:02:00.000

Modified: 2024-11-21T00:01:30.547

Link: CVE-2005-3276

cve-icon Redhat

Severity : Low

Publid Date: 2005-07-27T00:00:00Z

Links: CVE-2005-3276 - Bugzilla