CVE-2013-2148

The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which…

published June 7, 2013

CVSS
—
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.2th percentile
Published
2013-06-07T10:00Z
EPSS history
Timeline
  • 07 JUN 10:00Z
    The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which…
    cvelistv5