Description
The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQL_GETMASTRCFG ioctl call.
References (21)
... and 1 more
Scores
EPSS
0.0010
EPSS Percentile
27.5%
Details
CWE
CWE-909
Status
published
Products (11)
canonical/ubuntu_linux
6.06
canonical/ubuntu_linux
9.10
canonical/ubuntu_linux
10.04
canonical/ubuntu_linux
10.10
debian/debian_linux
5.0
linux/linux_kernel
2.6.36 (5 CPE variants)
linux/linux_kernel
< 2.6.36
opensuse/opensuse
11.1
suse/linux_enterprise_desktop
11 (2 CPE variants)
suse/linux_enterprise_real_time_extension
11 sp1
... and 1 more
Published
Sep 30, 2010
Tracked Since
Feb 18, 2026