Linux Kernel '/drivers/media/media-device.c' Local Information Disclosure Vulnerability

Bugtraq ID:	68048
Class:	Design Error
CVE:	CVE-2014-1739
Remote:	No
Local:	Yes
Published:	Apr 28 2014 12:00AM
Updated:	Dec 24 2014 12:57AM
Credit:	Salva Peiró
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Oracle Enterprise Linux 5 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.13 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 2.6.39 rc4 Linux kernel 2.6.39 Linux kernel 2.6.38 Linux kernel 3.2.2 Linux kernel 3.0-rc4-git1 Linux kernel 3.0-rc1 Linux kernel 2.6.39-rc6 Linux kernel 2.6.39-rc3 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2 Linux kernel 2.6.38-rc7 Linux kernel 2.6.38-rc4 Linux kernel 2.6.38-rc2 Linux kernel 2.6.38-git18
Not Vulnerable:

Linux Kernel '/drivers/media/media-device.c' Local Information Disclosure Vulnerability

The Linux kernel is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to cause a memory leak to obtain sensitive information that may lead to further attacks.

Linux kernel 2.6.38 through 3.15-rc2 are vulnerable.

Linux Kernel '/drivers/media/media-device.c' Local Information Disclosure Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/68048.c

Linux Kernel '/drivers/media/media-device.c' Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel '/drivers/media/media-device.c' Local Information Disclosure Vulnerability

References:

• Linux kernel Homepage (kernel.org)