Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive information from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel ‘do_video_set_spu_palette’ 信息泄露漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 3.6.5之前的版本中的fs/compat_ioctl.c中的‘do_video_set_spu_palette’函数中存在漏洞，该漏洞源于某些系统架构缺乏一定的错误检查。本地攻击者可通过特制的VIDEO_SET_SPU_PALETTE ioctl调用/dev/dvb设备利用该漏洞获得来自内核栈内存的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A