Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel SDLA_XFER Kernel内存泄露漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel在处理内核变量时存在问题，本地攻击者可能利用此漏洞获取部分内核内存信息。 Linux Kernel的sdla_xfer中存在内存泄露漏洞。sdla_read()将len处理为short型，但mem.len为int型。因此，如果mem.len == 0x20000的话，分配仍可能成功。在转换变短的时候，len转换为0x0，导
CVSS Information
N/A
Vulnerability Type
N/A