An information disclosure vulnerability in the Linux kernel that exposes stack memory (tracked as CVE-2020-28588 ) can be exploited to leak data and act as a springboard for further compromise. . Disclosed by Cisco Talos researchers on Tuesday , the bug is described as an information disclosure vulnerability "that could allow an attacker to view Kernel stack memory." The kernel is a key component of the open source Linux operating system. The vulnerability, tracked as CVE-2020-28588 , was found in the proc/pid/syscall functionality of 32-bit ARM devices running the OS. . Revealed by Microsoft Security, this vulnerability is a privacy breach within the Windows OS that may result in unauthorized data access.. Linux Kernel Security, Data Leak Issues, Information Disclosure. . Brittany Day
Get the latest Linux and open source security news straight to your inbox.