CVE

Id
91388  
CVE No.
CVE-2016-4569  
Status
Candidate  
Description
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.  
Phase
Assigned (20160509)  
Votes
None (candidate not yet proposed)  
Comments