Bug 505700 (CVE-2014-1445)

Summary:	Kernel: wanxl: information leak in ioctl (CVE-2014-1445)
Product:	Gentoo Security	Reporter:	Agostino Sarubbo <ago>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2014-03-25 13:26:15 UTC

CVE-2014-1445 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1445):

The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly 
initialize a certain data structure, which allows local users to obtain sensitive information from kernel 
memory via an ioctl call.

Comment 1 John Helmert III archtester

2022-03-25 21:49:21 UTC

Fix in 3.12, https://github.com/torvalds/linux/commit/2b13d06c9584b4eb773f1e80bbaedab9a1c344e1