Linux Kernel contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the 'xfs_fs_geometry()' function in 'fs/xfs/xfs_fsops.c' fails to properly initialize the 'logsunit' member of the 'xfs_fsop_geom_t' structure, which will disclose kernel stack memory to a local attacker.
Classification
Location:
Local Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Solution:
Third-Party Solution
Exploit:
Exploit Unknown
Disclosure:
Uncoordinated Disclosure
Solution
Currently, there are no known workarounds or vendor upgrades to correct this issue. However, Dan Rosenberg has submitted a patch to address this vulnerability.
