CVE-2014-1739
Published
CVSS v3
N/A
CVSS v2
2.1
LOW
Affected
1
PROJECT
Description
The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call.
GitHub