CVE
- Id
- 102370
- CVE No.
- CVE-2017-5550
- Status
- Candidate
- Description
- Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision.
- Phase
- Assigned (20170120)
- Votes
- None (candidate not yet proposed)
- Comments