Scheduled maintenance: Some features related to account registration and licensing may be temporarily unavailable from Friday (May 8) at 1 PM to Sunday (May 10) at 5 PM (PST).
HomeDefectsLIN6-11489
Fixed

LIN6-11489 : Security Advisory - linux - CVE-2016-5244

Created: Jun 29, 2016    Updated: Dec 3, 2018
Resolved Date: Aug 10, 2016
Found In Version: 6.0.0.29
Fix Version: 6.0.0.31
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel

Description

The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5244

Other Downloads