Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBSD KernFS LSEEK Kernel内存泄露漏洞
Vulnerability Description
NetBSD是一款免费开放源代码的UNIX性质的操作系统。 NetBSD对kernfs文件系统的lseek(2)系统调用没有正确的验证文件偏移,这样用户级非特权进程可以读取任意kernel内存位置,导致泄漏敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A