Information Disclosure Vulnerability in Linux Kernel by The Linux Foundation

CVE-2016-4485

What is CVE-2016-4485?

The llc_cmsg_rcv function in the Linux kernel prior to version 4.5.5 fails to initialize a specific data structure, which allows attackers to potentially access sensitive information from the kernel stack memory by reading a message. This can lead to the unintentional exposure of sensitive data, raising security concerns for systems running affected kernel versions.

References