Partially Uninitialized Data Structure Vulnerability in Linux Kernel (CID-50535249f624)

Partially Uninitialized Data Structure Vulnerability in Linux Kernel (CID-50535249f624)

CVE-2021-29647 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.