cve/2005/CVE-2005-3276.md

CVE-2005-3276

Description

The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information.

POC

Reference

• http://www.securityfocus.com/archive/1/428028/100/0/threaded
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9748

Github

No PoCs found on GitHub currently.