:Linux Kernel "vmsplice()" System Call Vulnerabilities
Linux Kernel "vmsplice()" System Call Vulnerabilities Feb 11, 2008, 14 :00 UTC (2 Talkback[s]) (5480 reads)
"Some vulnerabilities have been reported in the Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, and gain escalated privileges.
"The vulnerabilities are caused due to the missing verification of parameters within the 'vmsplice_to_user()', 'copy_from_user_mmap_sem()', and 'get_iovec_page_array()' functions in fs/splice.c before using them to perform certain memory operations..."
