CVE-2010-4158
Linux Kernel < 2.6.36.2 - Information Disclosure via Uninitialized Stack Memory in Socket Filter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4158. PoCs published by Dan Rosenberg.
AI-analyzed exploit summary This exploit leverages a Linux kernel information disclosure vulnerability (CVE-2010-4158) by using BPF filters to read uninitialized kernel stack bytes via UDP socket operations. It demonstrates the flaw by extracting a specific byte from the kernel stack.
Description
The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
Exploits (1)
This exploit leverages a Linux kernel information disclosure vulnerability (CVE-2010-4158) by using BPF filters to read uninitialized kernel stack bytes via UDP socket operations. It demonstrates the flaw by extracting a specific byte from the kernel stack.