{ "schema_version": "1.4.0", "id": "GHSA-v54r-62m5-x6xc", "modified": "2022-05-13T01:24:00Z", "published": "2022-05-13T01:24:00Z", "aliases": [ "CVE-2010-4565" ], "details": "The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4565" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=664544" }, { "type": "WEB", "url": "http://openwall.com/lists/oss-security/2010/11/03/3" }, { "type": "WEB", "url": "http://openwall.com/lists/oss-security/2010/11/04/4" }, { "type": "WEB", "url": "http://openwall.com/lists/oss-security/2010/12/20/2" }, { "type": "WEB", "url": "http://openwall.com/lists/oss-security/2010/12/21/1" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:029" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/44661" }, { "type": "WEB", "url": "http://www.spinics.net/lists/netdev/msg145791.html" }, { "type": "WEB", "url": "http://www.spinics.net/lists/netdev/msg145796.html" }, { "type": "WEB", "url": "http://www.spinics.net/lists/netdev/msg146270.html" }, { "type": "WEB", "url": "http://www.spinics.net/lists/netdev/msg146468.html" } ], "database_specific": { "cwe_ids": [ "CWE-200" ], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-12-29T18:00:00Z" } }