Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel sock.c SO_BSDCOMPAT选项信息泄露漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 在Linux Kernel的net/core/sock.c文件的sock_getsockopt()函数中，如果设置了SO_BSDCOMPA选项的话optval v.val就会被错误地初始化并直接返回给用户域，导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A