Linux Kernel Function Crafted Program Ioctl Call Execution Memory Content Local Disclosure Vulnerability
3 May. 2013
Summary
Linux kernel net/bluetooth/hidp/core.c hidp_setup_hid() function crafted program ioctl(HIDPCONNADD) call execution memory content local suffers from dsclosure vulnerability.
Credit:
The information has been provided by Anderson Lizardo.
Linux Kernel contains a flaw that may lead to unauthorized disclosure of potentially sensitive information. The issue is triggered when the hidp_setup_hid() function in net/bluetooth/hidp/core.c relies on the user provided string to guarantee null termination. This may allow a local attacker to use a crafted program which triggers a ioctl(HIDPCONNADD) call to gain access to potentially sensitive memory content information.
