The rdsincinfo_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message.
[
{
"source": "https://github.com/torvalds/linux/commit/4116def2337991b39919f3b448326e21c40e0dbb",
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2016-5244-4d47d6c9",
"target": {
"function": "rds_inc_info_copy",
"file": "net/rds/recv.c"
},
"digest": {
"length": 535.0,
"function_hash": "336295930793208337759396680278902723233"
},
"deprecated": false
},
{
"source": "https://github.com/torvalds/linux/commit/4116def2337991b39919f3b448326e21c40e0dbb",
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2016-5244-b8db9664",
"target": {
"file": "net/rds/recv.c"
},
"digest": {
"line_hashes": [
"288750582223773285938400159747343439799",
"257961609276061901559095979629422920512"
],
"threshold": 0.9
},
"deprecated": false
}
]