SB2004120604 - Missing release of memory after effective lifetime in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2004120604

SB2004120604 - Missing release of memory after effective lifetime in Linux kernel

Published: December 6, 2004

Security Bulletin ID SB2004120604
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Missing release of memory after effective lifetime (CVE-ID: CVE-2004-0565)

The vulnerability allows a local user to gain access to sensitive information.

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.


Remediation

Install update from vendor's website.

References