PT-2009-5889 · Linux+1 · Linux Kernel+1
Eugene Teo
·
Published
2009-10-19
·
Updated
2023-02-13
·
CVE-2009-3612
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.4.37.6 and earlier
Linux kernel versions 2.6.x before 2.6.32-rc5
Description
The issue is related to the tcf fill node function in the netlink subsystem, which does not initialize a certain structure member. This might allow local users to obtain sensitive information from kernel memory.
Recommendations
For Linux kernel versions 2.4.37.6 and earlier, update to a version later than 2.4.37.6.
For Linux kernel versions 2.6.x before 2.6.32-rc5, update to version 2.6.32-rc5 or later.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat