QwikSec

Security Database

CVE

CWE

Training

CVE-2013-6392

Published: Nov 30, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/base/genlock.c?id=e3c43027bdb59f03eec7ead0a01c77e4bf801625&h=jb_3.2.3

x_refsource_CONFIRM

[oss-security] 20131125 Re: CVE request: Kernel MSM - Memory leak in drivers/base/genlock.c

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.