Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 515486 (CVE-2014-0206) - Kernel: aio: insufficient sanitization of head in aio_read_events_ring() (CVE-2014-0206)
Summary: Kernel: aio: insufficient sanitization of head in aio_read_events_ring() (CVE...
Status: RESOLVED FIXED
Alias: CVE-2014-0206
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Kernel Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-06-27 08:06 UTC by Agostino Sarubbo
Modified: 2022-03-25 22:16 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2014-06-27 08:06:34 UTC 
CVE-2014-0206 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0206):
  Array index error in the aio_read_events_ring function in fs/aio.c in the 
  Linux kernel through 3.15.1 allows local users to obtain sensitive information 
  from kernel memory via a large head value.
Comment 2 GLSAMaker/CVETool Bot gentoo-dev 2014-08-10 22:02:03 UTC 
CVE-2014-0206 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0206):
  Array index error in the aio_read_events_ring function in fs/aio.c in the
  Linux kernel through 3.15.1 allows local users to obtain sensitive
  information from kernel memory via a large head value.