PT-2008-6894 · Linux+1 · Linux+1
Clement Lecigne
+1
·
Published
1970-01-01
·
Updated
2018-10-10
·
CVE-2009-0676
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
linux-image-2.6.26-1-alpha-smp versions 2.6.26-1
linux-image-2.6.26-1-vserver-powerpc64 versions 2.6.26-1
linux-image-2.6.26-1-vserver-itanium versions 2.6.26-1
linux-headers-2.6.26-1-powerpc versions 2.6.26-1
linux-image-2.6.26-1-r4k-ip22 versions 2.6.26-1
kernel-s390-debug versions 2.6.26-1
kexec-tools versions 2.6.26-1
linux-image-2.6.26-1-vserver-amd64 versions 2.6.26-1
linux-headers-2.6.26-1-itanium versions 2.6.26-1
linux-headers-2.6.26-1-all-i386 versions 2.6.26-1
linux-image-2.6.26-1-mckinley versions 2.6.26-1
linux-image-2.6.26-1-vserver-686-bigmem versions 2.6.26-1
um-host-install-initrd versions 2.6.26-1
kernel-iseries64-debuginfo versions 2.6.26-1
linux-headers-2.6.26-1-vserver-amd64 versions 2.6.26-1
linux-headers-2.6.26-1-all-mipsel versions 2.6.26-1
linux-headers-2.6.26-1-vserver-s390x versions 2.6.26-1
module-init-tools-debugsource versions 2.6.26-1
linux-image-2.6.26-1-powerpc-smp versions 2.6.26-1
linux-headers-2.6.26-1-all-amd64 versions 2.6.26-1
linux-headers-2.6.26-1-parisc versions 2.6.26-1
acerhk-kmp-debug versions 2.6.26-1
kernel-sn2 versions 2.6.26-1
linux-headers-2.6.26-1-common-openvz versions 2.6.26-1
kernel-xen-base versions 2.6.26-1
linux-headers-2.6.26-1-all-alpha versions 2.6.26-1
linux-headers-2.6.26-1-r4k-ip22 versions 2.6.26-1
linux-headers-2.6.26-1-mckinley versions 2.6.26-1
linux-headers-2.6.26-1-openvz-686 versions 2.6.26-1
linux-headers-2.6.26-1-vserver-686 versions 2.6.26-1
gspcav-kmp-debug versions 2.6.26-1
nouveau-kmp-debug versions 2.6.26-1
kernel-bigsmp-debuginfo versions 2.6.26-1
module-init-tools-debuginfo versions 2.6.26-1
linux-image-2.6.26-1-4kc-malta versions 2.6.26-1
linux-image-2.6.26-1-486 versions 2.6.26-1
linux-image-2.6.26-1-parisc-smp versions 2.6.26-1
linux-headers-2.6.26-1-all versions 2.6.26-1
linux-headers-2.6.26-1-s390x versions 2.6.26-1
linux-headers-2.6.26-1-sparc64-smp versions 2.6.26-1
kernel-pseries64 versions 2.6.26-1
linux-image-2.6.26-1-vserver-powerpc versions 2.6.26-1
module-init-tools versions 2.6.26-1
kernel-pmac64 versions 2.6.26-1
linux-headers-2.6.26-1-parisc64-smp versions 2.6.26-1
kernel-s390x-debug versions 2.6.26-1
linux-image-2.6.26-1-sb1-bcm91250a versions 2.6.26-1
linux-headers-2.6.26-1-vserver-mckinley versions 2.6.26-1
linux-headers-2.6.26-1-all-ia64 versions 2.6.26-1
kernel-ec2-base versions 2.6.26-1
linux-image-2.6.26-1-vserver-sparc64 versions 2.6.26-1
ext4dev-kmp-default versions 2.6.26-1
linux-headers-2.6.26-1-all-hppa versions 2.6.26-1
linux-image-2.6.26-1-parisc64-smp versions 2.6.26-1
um-host-kernel versions 2.6.26-1
linux-headers-2.6.26-1-all-arm versions 2.6.26-1
linux-image-2.6.26-1-s390-tape versions 2.6.26-1
ocfs2-kmp-xen versions 2.6.26-1
linux-headers-2.6.26-1-4kc-malta versions 2.6.26-1
linux-headers-2.6.26-1-parisc-smp versions 2.6.26-1
kernel-um versions 2.6.26-1
kernel-default-extra versions 2.6.26-1
kernel-s390 versions 2.6.26-1
linux-headers-2.6.26-1-openvz-amd64 versions 2.6.26-1
linux-image-2.6.26-1-alpha-legacy versions 2.6.26-1
linux-image-2.6.26-1-openvz-686 versions 2.6.26-1
linux-headers-2.6.26-1-vserver-powerpc versions 2.6.26-1
linux-headers-2.6.26-1-s390 versions 2.6.26-1
linux-image-2.6.26-1-xen-686 versions 2.6.26-1
linux-headers-2.6.26-1-common versions 2.6.26-1
kernel-ppc64-debugsource versions 2.6.26-1
linux-image-2.6.26-1-686-bigmem versions 2.6.26-1
kernel-xenpae-debuginfo versions 2.6.26-1
linux-headers-2.6.26-1-sb1a-bcm91480b versions 2.6.26-1
linux-image-2.6.26-1-s390x versions 2.6.26-1
linux-image-2.6.26-1-parisc versions 2.6.26-1
Description
The issue is related to multiple vulnerabilities in various Linux kernel packages. These vulnerabilities can be exploited remotely, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The sock getsockopt function in the Linux kernel does not initialize a certain structure member, allowing local users to obtain potentially sensitive information from kernel memory via an SO BSDCOMPAT getsockopt request.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux
Red Hat