** Description changed: - Linux kernel: various info leaks + The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the + Linux kernel before 3.6 does not initialize a certain structure for + IP_VS_SO_GET_TIMEOUT commands, which allows local users to obtain + sensitive information from kernel stack memory via a crafted + application. Break-Fix: - 2d8a041b7bfe1097af21441cb77d6af95f4f4680
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1156732 Title: CVE-2012-6540 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1156732/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
