Common Vulnerabilities and Exposures assigned an identifier CVE-2013-2634 to the following vulnerability: net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. References: [1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2634 [2] http://www.openwall.com/lists/oss-security/2013/03/20/1 [3] http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=29cd8ae0e1a39e239a3a7b67da1986add1199fc0 [4] http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 [5] https://bugzilla.redhat.com/show_bug.cgi?id=923652 [6] https://github.com/torvalds/linux/commit/29cd8ae0e1a39e239a3a7b67da1986add1199fc0
Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5. This issue does affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this issue.
Created kernel tracking bugs for this issue Affects: fedora-all [bug 923662]
This issue has been addressed in following products: MRG for RHEL-6 v.2 Via RHSA-2013:0829 https://rhn.redhat.com/errata/RHSA-2013-0829.html
This issue has been addressed in following products: OpenStack 3 for RHEL 6 Via RHSA-2013:1080 https://rhn.redhat.com/errata/RHSA-2013-1080.html
This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2013:1051 https://rhn.redhat.com/errata/RHSA-2013-1051.html