Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-0957. PoCs published by Brad Spengler.
AI-analyzed exploit summary This exploit demonstrates a local information disclosure vulnerability in the Linux kernel by leveraging the UNAME26 personality flag to leak kernel stack memory via the uname system call. The PoC checks for leaked bytes in the utsname struct's release field after enabling the UNAME26 personality.
Description
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.
Exploits (1)
This exploit demonstrates a local information disclosure vulnerability in the Linux kernel by leveraging the UNAME26 personality flag to leak kernel stack memory via the uname system call. The PoC checks for leaked bytes in the utsname struct's release field after enabling the UNAME26 personality.