CVE-2009-3001: Infoleak

Published Aug 23, 2009
·
Updated

Description of problem: 1) NET: llc, zero sockaddrllc struct sllcarphrd member of sockaddrllc might not be changed. Zero sllc before copying to the above layer's structure.

http://git.kernel.org/linus/3480c63bdf008e9289aab94418f43b9592978fff http://git.kernel.org/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc http://milw0rm.com/exploits/9513

Note that LLC sockets are restricted to root since v2.6.25-rc9 (see commit 3480c63b).

2) can: Fix rawgetname() leak rawgetname() can leak 10 bytes of kernel memory to user

http://git.kernel.org/linus/e84b90ae5eb3c112d1f208964df1d8156a538289

Note that this was introduced in v2.6.25-rc1.

3) irda: Fix irdagetname() leak irdagetname() can leak kernel memory to user.

http://git.kernel.org/linus/09384dfc76e526c3993c09c42e016372dc9dd22c

4) appletalk: fix atalkgetname() leak atalkgetname() can leak 8 bytes of kernel memory to user

http://git.kernel.org/linus/3d392475c873c10c10d6d96b94d092a34ebd4791 http://milw0rm.com/exploits/9521

5) netrom: Fix nrgetname() leak nrgetname() can leak kernel memory to user.

http://git.kernel.org/linus/f6b97b29513950bfbf621a83d85b6f86b39ec8db

6) econet: Fix econetgetname() leak econetgetname() can leak kernel memory to user.

http://git.kernel.org/linus/80922bbb12a105f858a8f0abb879cb4302d0ecaa

7) rose: Fix rosegetname() leak rosegetname() can leak kernel memory to user.

http://git.kernel.org/linus/17ac2e9c58b69a1e25460a568eae1b0dc0188c25

CVE request: http://article.gmane.org/gmane.comp.security.oss.general/2029 http://article.gmane.org/gmane.comp.security.oss.general/2033

Other sources

The llcuigetname function in net/llc/afllc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AFLLC socket.

Red Hat

Affected Software

12 affected components
Linux Linux kernel<2.6.31
Linux Linux kernel=2.6.31
Linux Linux kernel=2.6.31-rc1
Linux Linux kernel=2.6.31-rc2
Linux Linux kernel=2.6.31-rc3
Linux Linux kernel=2.6.31-rc4
Linux Linux kernel=2.6.31-rc5
Linux Linux kernel=2.6.31-rc6
Canonical Ubuntu Linux=6.06
Canonical Ubuntu Linux=8.04
Canonical Ubuntu Linux=8.10
Canonical Ubuntu Linux=9.04

Event History

Aug 23, 2009
CVE Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionSeverity
Aug 26, 2009
Data Sourced
via Red Hat·01:50 AM
Affected Software
Aug 28, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2009-3001?

CVE-2009-3001 has been rated as a moderate severity vulnerability due to information leak issues.

2

How do I fix CVE-2009-3001?

To fix CVE-2009-3001, update your Linux Kernel to a version higher than 2.6.31.

3

What systems are affected by CVE-2009-3001?

CVE-2009-3001 affects Linux Kernel versions 2.6.31 and earlier, along with specific versions of Ubuntu Linux.

4

What type of vulnerability is CVE-2009-3001?

CVE-2009-3001 is an information disclosure vulnerability that can expose sensitive data.

5

Is there a patch for CVE-2009-3001?

Yes, patches for CVE-2009-3001 are available in the updated versions of the Linux kernel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203