Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel kernel/signal.c do_sigaltstack函数敏感信息泄露漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 当运行在64位系统上时，Linux Kernel的kernel/signal.c文件中的do_sigaltstack函数没有清除结构的某些填充字节。本地用户可通过sigaltstack函数从内核栈获得敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A