RETIRED: Linux Kernel 'control.c' Local Memory Corruption Vulnerability

Bugtraq ID:	68165
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 24 2014 12:00AM
Updated:	Jul 03 2014 03:47PM
Credit:	Lars-Peter Clausen
Vulnerable:	Linux kernel
Not Vulnerable:

RETIRED: Linux Kernel 'control.c' Local Memory Corruption Vulnerability

The Linux kernel is prone to a local memory-corruption vulnerability.

Successfully exploiting this issue will allow an attacker to cause a memory leak to obtain sensitive information. Failed exploit attempts will likely crash the kernel, denying service to legitimate users.

Note: This BID is being retired. This issue has been moved to BID 68163 (Linux Kernel 'sound/core/control.c' Multiple Integer Overflow Vulnerabilities) for better documentation.

RETIRED: Linux Kernel 'control.c' Local Memory Corruption Vulnerability

A proof-of-concept code is available; Please see the references for more information.

RETIRED: Linux Kernel 'control.c' Local Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Linux Kernel 'control.c' Local Memory Corruption Vulnerability

References:

• Linux kernel Homepage (kernel.org)