huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2012-6647: Kernel: futex: forbid uaddr == uaddr2 in futex_wait_requeue_pi()
Component: Kernel
Severity: Moderate
Public date: 2012-07-20T00:00:00+00:00

A NULL pointer dereference flaw was found in the way the futex_wait_requeue_pi() function of the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance (PI) futexes. A local, unprivileged user could use this flaw to crash the system.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5 and 7, and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6f7b0a2a5c0fb03be7c25bd1745baa50582348ef
CVE-2012-6657: Kernel: net: guard tcp_set_keepalive against crash
Component: Kernel
Severity: Low
Public date: 2012-09-24T00:00:00+00:00

It was found that the Linux kernel's networking implementation did not correctly handle the setting of the keepalive socket option on raw sockets. A local user able to create a raw socket could use this flaw to crash the system.

Statement: This issue does not affect the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2.

This issue affects the version of the kernel package as shipped with
Red Hat Enterprise Linux 5 and 6. Future kernel updates for Red Hat Enterprise
Linux 5 and 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 3e10986d1d698140747fcfc2761ec9cb64c1d582
CVE-2012-6662: jquery-ui: XSS vulnerability in default content in Tooltip widget
Component: jquery-ui
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2012-11-27T00:00:00+00:00

Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.


Affected upstream versions: n/a
Fixed upstream versions: 1.10.0
Upstream repository: https://github.com/jquery/jquery-ui
Upstream fix commit: f2854408cce7e4b7fc6bf8676761904af9c96bde
CVE-2012-6689: libmnl: incorrect validation of netlink message origin allows attackers to spoof netlink messages
Component: libmnl
Severity: Moderate
Public date: 2015-02-06T00:00:00+00:00

The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.


Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 20e1db19db5d6b9e4e83021595eab0dc8f107bef
CVE-2012-6701: kernel: AIO interface didn't use rw_verify_area() for checking mandatory locking on files and size of access
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2012-05-21T00:00:00+00:00

It was found that AIO interface didn't use the proper rw_verify_area() helper function with extended functionality, for example, mandatory locking on the file. Also rw_verify_area() makes extended checks, for example, that the size of the access doesn't cause overflow of the provided offset limits. This integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6. Future Linux kernel updates for the respective releases might address this issue.

This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2 as the corresponding fix is already present.

Affected upstream versions: n/a
Fixed upstream versions: v3.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a70b52ec1aaeaf60f4739edb1b422827cb6f3893
CVE-2013-0158: jenkins: remote unauthenticated retrieval of master cryptographic key (Jenkins Security Advisory 2013-01-04)
Component: jenkins
Severity: Important
Public date: 2013-01-04T00:00:00+00:00

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.498
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: 3dc13b957b14cec649036e8dd517f0f9cb21fb04
CVE-2013-0164: openshift-origin-port-proxy: openshift-port-proxy-cfg lockwrap() tmp file creation
Component: openshift-origin-port-proxy
Severity: Low
CWE: CWE-377 (Insecure Temporary File)
Public date: 2013-01-31T00:00:00+00:00

The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.


Affected upstream versions: n/a
Upstream repository: https://github.com/openshift/origin-server
Upstream fix commit: 524465f70a32d0eb6bf047e6a05c76c22d52bfa2
CVE-2013-0166: openssl: DoS due to improper handling of OCSP response verification
Component: openssl
Severity: Moderate
Public date: 2013-02-05T00:00:00+00:00

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_0_9_8y
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 66e8211c0b1347970096e04b18aa52567c325200
CVE-2013-0170: libvirt: use-after-free in virNetMessageFree()
Component: libvirt
Severity: Important
CWE: CWE-416 (Use After Free)
Public date: 2013-01-28T00:00:00+00:00

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

Statement: Not vulnerable. This issue did not affect the versions of libvirt as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v1.0.2
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: 46532e3e8ed5f5a736a02f67d6c805492f9ca720
CVE-2013-0183: rubygem-rack: receiving excessively long lines triggers out-of-memory error
Component: rubygem-rack
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
Public date: 2013-01-07T00:00:00+00:00

multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet.


Affected upstream versions: n/a
Fixed upstream versions: 1.3.8
Upstream repository: https://github.com/rack/rack
Upstream fix commit: 548b9af2dc0059f4c0c19728624448d84de450ff
CVE-2013-0208: openstack-nova: Boot from volume allows access to random volumes
Component: openstack-nova
Severity: Important
Public date: 2013-01-29T00:00:00+00:00

The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter.


Affected upstream versions: n/a
Fixed upstream versions: 2012.2.3
Upstream repository: https://github.com/openstack/nova
Upstream fix commit: 317cc0af385536dee43ef2addad50a91357fc1ad
CVE-2013-0212: openstack-glance: Backend password leak in Glance error message
Component: openstack-glance
Severity: Important
CWE: CWE-209 (Generation of Error Message Containing Sensitive Information)
Public date: 2013-01-29T00:00:00+00:00

store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages.


Affected upstream versions: n/a
Fixed upstream versions: 2012.2.3
Upstream repository: https://github.com/openstack/glance
Upstream fix commit: 96a470be64adcef97f235ca96ed3c59ed954a4c1
CVE-2013-0216: kernel: xen: Linux netback DoS via malicious guest ring.
Component: kernel
Severity: Moderate
Public date: 2013-02-05T00:00:00+00:00

The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption.

Statement: This issue did affect the versions of the kernel-xen package as shipped with Red Hat Enterprise Linux 5.

This issue did not affect Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 48856286b64e4b66ec62b94e504d0b29c1ade664
CVE-2013-0219: sssd: TOCTOU race conditions by copying and removing directory trees
Component: sssd
Severity: Low
CWE: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
Public date: 2013-01-23T00:00:00+00:00

System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/sssd.git
Upstream fix commit: 94cbf1cfb0f88c967f1fb0a4cf23723148868e4a
CVE-2013-0220: sssd: Out-of-bounds read flaws in autofs and ssh services responders
Component: sssd
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2013-01-23T00:00:00+00:00

The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/sssd.git
Upstream fix commit: 30e2585dd46b62aa3a4abdf6de3f40a20e1743ab
CVE-2013-0228: kernel: xen: userspace alterable %ds access in xen_iret()
Component: kernel
Severity: Important
Public date: 2013-02-13T00:00:00+00:00

The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.

Statement: This issue did affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 6.

This issue did not affect Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 13d2b4d11d69a92574a55bfd985cfb0ca77aebdc
CVE-2013-0256: rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template
Component: rubygem-rdoc
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Public date: 2013-02-06T00:00:00+00:00

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.


Affected upstream versions: n/a
Fixed upstream versions: v4.0.0
Upstream repository: https://github.com/rdoc/rdoc
Upstream fix commit: ffa87887ee0517793df7541629a470e331f9fe60
CVE-2013-0262: rubygem-rack: Path sanitization information disclosure
Component: rubygem-rack
Severity: Moderate
Public date: 2013-02-08T00:00:00+00:00

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."


Affected upstream versions: n/a
Fixed upstream versions: 1.6.0
Upstream repository: https://github.com/rack/rack
Upstream fix commit: 6f237e4c9fab649d3750482514f0fde76c56ab30
CVE-2013-0263: rubygem-rack: Timing attack in cookie sessions
Component: rubygem-rack
Severity: Moderate
Public date: 2013-02-08T00:00:00+00:00

Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.


Affected upstream versions: n/a
Fixed upstream versions: 1.6.0
Upstream repository: https://github.com/rack/rack
Upstream fix commit: 9a81b961457805f6d1a5c275d053068440421e11
CVE-2013-0268: kernel: x86/msr: /dev/cpu/*/msr local privilege escalation
Component: kernel
Severity: Important
Public date: 2013-01-24T00:00:00+00:00

The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.

Statement: This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c903f0456bc69176912dee6dd25c6a66ee1aed00
CVE-2013-0272: pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers
Component: pidgin
Severity: Moderate
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2013-02-13T00:00:00+00:00

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: 879db2a9a59c
CVE-2013-0273: pidgin: Meanwhile protocol missing nul termination of long Lotus Sametime usernames
Component: pidgin
Severity: Moderate
Public date: 2013-02-13T00:00:00+00:00

sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: c31cf8de31cd
CVE-2013-0274: pidgin: missing nul termination of long values in UPnP responses
Component: pidgin
Severity: Moderate
Public date: 2013-02-13T00:00:00+00:00

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: ad7e7fb98db3
CVE-2013-0281: pacemaker: remote DoS when CIB management is enabled caused by use of blocking sockets
Component: pacemaker
Severity: Low
Public date: 2013-02-14T00:00:00+00:00

Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not limit the duration of connections to the blocking sockets, which allows remote attackers to cause a denial of service (connection blocking).


Affected upstream versions: n/a
Fixed upstream versions: Pacemaker-1.1.9
Upstream repository: https://github.com/ClusterLabs/pacemaker
Upstream fix commit: 564f7cc2a51dcd2f28ab12a13394f31be5aa3c93
CVE-2013-0287: sssd: simple access provider flaw prevents intended ACL use when client to an AD provider
Component: sssd
Severity: Moderate
Public date: 2013-03-19T00:00:00+00:00

The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/sssd.git
Upstream fix commit: 7619be9f6bf649665fcbeee9e6b120f9f9cba2a5
CVE-2013-0288: nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow
Component: nss-pam-ldapd
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2013-02-18T00:00:00+00:00

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.


Affected upstream versions: n/a
Fixed upstream versions: 0.8.11
Upstream repository: https://arthurdejong.org/git/nss-pam-ldapd
Upstream fix commit: 7867b93f9a7c76b96f1571cddc1de0811134bb81
CVE-2013-0290: kernel: net: infinite loop in __skb_recv_datagram()
Component: kernel
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2013-02-12T00:00:00+00:00

The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5 and 6.

This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 77c1090f94d1b0b5186fb13a1b71b47b1343f87f
CVE-2013-0292: dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received
Component: dbus-glib
Severity: Important
Public date: 2013-02-14T00:00:00+00:00

The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.


Affected upstream versions: n/a
Fixed upstream versions: dbus-glib_0.100.1
Upstream repository: https://cgit.freedesktop.org/dbus/dbus-glib
Upstream fix commit: 166978a09cf5edff4028e670b6074215a4c75eca
CVE-2013-0309: kernel: mm: thp: pmd_present and PROT_NONE local DoS
Component: kernel
Severity: Moderate
Public date: 2013-02-19T00:00:00+00:00

arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system crash) via a crafted application.

Statement: This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.7
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 027ef6c87853b0a9df53175063028edb4950d476
CVE-2013-0310: kernel: net: CIPSO_V4_TAG_LOCAL tag NULL pointer dereference
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2013-02-19T00:00:00+00:00

The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call.

Statement: This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.5
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 89d7ae34cdda4195809a5a987f697a517a2a3177
CVE-2013-0311: kernel: vhost: fix length for cross region descriptor
Component: kernel
Severity: Important
Public date: 2013-02-19T00:00:00+00:00

The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.

Statement: This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.7
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: bd97120fc3d1a11f3124c7c9ba1d91f51829eb85
CVE-2013-0338: libxml2: CPU consumption DoS when performing string substitutions during entities expansion
Component: libxml2
Severity: Moderate
Public date: 2013-02-19T00:00:00+00:00

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.1
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 23f05e0c33987d6605387b300c4be5da2120a7ab
CVE-2013-0349: kernel: bluetooth HIDP implementation information disclosure
Component: kernel
Severity: Low
Public date: 2013-01-09T00:00:00+00:00

The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.

Statement: This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.

This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 0a9ab9bdb3e891762553f667066190c1d22ad62b