Bug 849036 (CVE-2013-4516) - VUL-1: CVE-2013-4516: kernel: staging/sb105x: kernel memory disclosure via uninitialized structure members
Summary: VUL-1: CVE-2013-4516: kernel: staging/sb105x: kernel memory disclosure via un...
Status: RESOLVED WONTFIX
Alias: CVE-2013-4516
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: E-mail List
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-11-05 14:10 UTC by Victor Pereira
Modified: 2016-04-27 19:10 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Victor Pereira 2013-11-05 14:10:46 UTC 
drivers/staging/sb105x/sb_pci_mp.c: kernel memory disclosure via uninitialized structure members 

references:

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a8b33654b1e3b0c74d4a1fed041c9aae50b3c427

http://permalink.gmane.org/gmane.comp.security.oss.general/11431
Comment 1 Marcus Meissner 2013-11-05 16:21:53 UTC 
sb105x driver is not in SLES11 SP3 or older products, so they are not affected.

openSUSE might be affected.
Comment 2 Swamp Workflow Management 2013-11-05 23:01:01 UTC 
bugbot adjusting priority
Comment 4 Borislav Petkov 2013-12-17 15:49:47 UTC 
CONFIG_SB105X is not enabled on openSUSE, also not affected. Closing.
Comment 5 SMASH SMASH 2014-02-27 14:15:16 UTC 
Affected packages:

SLE-11-SP3: kernel-source
SLE-11-SP1-TERADATA: kernel-source
SLE-10-SP4: kernel-source
SLE-9-SP3-TERADATA: kernel-source
SLE-9-SP4: kernel-source