VYPR
← All advisories
Low severity3.3NVD Advisory· Published Nov 16, 2017· Updated Jun 17, 2026

CVE-2017-1088

CVE-2017-1088

Description

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not properly clear the memory of the kld_file_stat structure before filling the data. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information from the kernel stack is possible. As a result, some bytes from the kernel stack can be observed in userspace.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • FreeBSD/FreeBSD2 versions
    cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*
    • (no CPE)range: All supported versions of FreeBSD
  • FreeBSD/kernelllm-fuzzy
    Range: <11.1-STABLE, <11.1-RELEASE-p4, <11.0-RELEASE-p15, <10.4-STABLE, <10.4-RELEASE-p3, <10.3-RELEASE-p24
  • osv-coords
    pkg:deb/debian/kfreebsd-10?arch=source
    Range: >= 0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.