CVE-2009-3001: Infoleak
Description of problem: 1) NET: llc, zero sockaddrllc struct sllcarphrd member of sockaddrllc might not be changed. Zero sllc before copying to the above layer's structure.
http://git.kernel.org/linus/3480c63bdf008e9289aab94418f43b9592978fff http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc http://milw0rm.com/exploits/9513
Note that LLC sockets are restricted to root since v2.6.25-rc9 (see commit 3480c63b).
2) can: Fix rawgetname() leak rawgetname() can leak 10 bytes of kernel memory to user
http://git.kernel.org/linus/e84b90ae5eb3c112d1f208964df1d8156a538289
Note that this was introduced in v2.6.25-rc1.
3) irda: Fix irdagetname() leak irdagetname() can leak kernel memory to user.
http://git.kernel.org/linus/09384dfc76e526c3993c09c42e016372dc9dd22c
4) appletalk: fix atalkgetname() leak atalkgetname() can leak 8 bytes of kernel memory to user
http://git.kernel.org/linus/3d392475c873c10c10d6d96b94d092a34ebd4791 http://milw0rm.com/exploits/9521
5) netrom: Fix nrgetname() leak nrgetname() can leak kernel memory to user.
http://git.kernel.org/linus/f6b97b29513950bfbf621a83d85b6f86b39ec8db
6) econet: Fix econetgetname() leak econetgetname() can leak kernel memory to user.
http://git.kernel.org/linus/80922bbb12a105f858a8f0abb879cb4302d0ecaa
7) rose: Fix rosegetname() leak rosegetname() can leak kernel memory to user.
http://git.kernel.org/linus/17ac2e9c58b69a1e25460a568eae1b0dc0188c25
CVE request: http://article.gmane.org/gmane.comp.security.oss.general/2029 http://article.gmane.org/gmane.comp.security.oss.general/2033
Other sources
The llcuigetname function in net/llc/afllc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AFLLC socket.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3001?
CVE-2009-3001 has been rated as a moderate severity vulnerability due to information leak issues.
How do I fix CVE-2009-3001?
To fix CVE-2009-3001, update your Linux Kernel to a version higher than 2.6.31.
What systems are affected by CVE-2009-3001?
CVE-2009-3001 affects Linux Kernel versions 2.6.31 and earlier, along with specific versions of Ubuntu Linux.
What type of vulnerability is CVE-2009-3001?
CVE-2009-3001 is an information disclosure vulnerability that can expose sensitive data.
Is there a patch for CVE-2009-3001?
Yes, patches for CVE-2009-3001 are available in the updated versions of the Linux kernel.