cve/2010/CVE-2010-4529.md

CVE-2010-4529

Description

Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel before 2.6.37 on platforms other than x86 allows local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call.

POC

Reference

No PoCs from references.

Github

• https://github.com/mergebase/usn2json
• https://github.com/vincent-deng/veracode-container-security-finding-parser