The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.
Linux
Information Disclosure
Suse Linux Enterprise Software Development Kit
Suse Linux Enterprise Debuginfo
Suse Linux Enterprise Desktop
+7
NVD
Exploit-DB
GitHub
CVSS 3.0
3.3
EPSS
0.5%