oss-sec mailing list archives

CVE-2013-0914 Linux kernel sa_restorer information leak

From: Kees Cook <keescook () chromium org>
Date: Mon, 11 Mar 2013 13:25:57 -0700

The sa_restorer field is not cleared across exec, allowing parent ASLR
information to leak to children.

https://lkml.org/lkml/2013/3/11/498

-Kees

-- 
Kees Cook
Chrome OS Security

Current thread:

CVE-2013-0914 Linux kernel sa_restorer information leak Kees Cook (Mar 11)