CVE ID:	CVE-2014-1446
Description:	The yam_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability for an SIOCYAMGCFG ioctl call.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1446 BugTraq ID: 64954 http://www.securityfocus.com/bid/64954 http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126874.html http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126858.html http://www.mandriva.com/security/advisories?name=MDVSA-2014:038 http://www.openwall.com/lists/oss-security/2014/01/15/3 http://www.ubuntu.com/usn/USN-2113-1 http://www.ubuntu.com/usn/USN-2117-1 http://www.ubuntu.com/usn/USN-2128-1 http://www.ubuntu.com/usn/USN-2129-1 http://www.ubuntu.com/usn/USN-2133-1 http://www.ubuntu.com/usn/USN-2134-1 http://www.ubuntu.com/usn/USN-2135-1 http://www.ubuntu.com/usn/USN-2136-1 http://www.ubuntu.com/usn/USN-2138-1 http://www.ubuntu.com/usn/USN-2139-1 http://www.ubuntu.com/usn/USN-2141-1 XForce ISS Database: linux-kernel-cve20141446-info-disc(90445) https://exchange.xforce.ibmcloud.com/vulnerabilities/90445