ID:4137 - Exploit for Information disclosure in Linux kernel - CVE-2012-4530

Link to public exploit:

Vulnerability description

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Remediation