vendor:
Linux Kernel
by:
iSEC Security Research
7.5
CVSS
HIGH
Integer handling vulnerability
CWE
Product Name: Linux Kernel
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Linux
2004
Local Integer Handling Vulnerability in Linux Kernel
The vulnerability allows an unprivileged local user to obtain kernel memory contents and a root user to write to arbitrary regions of kernel memory. The vulnerability is caused by integer handling errors in the proc handler for cpufreq.
Mitigation:
Apply patches or updates from the Linux kernel vendor.
