Tracker / CVE-2009-3001
CVE-2009-3001
Medium 4.9
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| linux | linux_kernel |
| linux | linux_kernel · … → 2.6.31 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.