CVE-2009-3002: Infoleak
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AFAPPLETALK socket, related to the atalkgetname function in net/appletalk/ddp.c; (2) an AFIRDA socket, related to the irdagetname function in net/irda/afirda.c; (3) an AFECONET socket, related to the econetgetname function in net/econet/afeconet.c; (4) an AFNETROM socket, related to the nrgetname function in net/netrom/afnetrom.c; (5) an AFROSE socket, related to the rosegetname function in net/rose/afrose.c; or (6) a raw CAN socket, related to the rawgetname function in net/can/raw.c.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2009-3002?
CVE-2009-3002 has a medium severity rating, indicating potential for information disclosure vulnerabilities.
How do I fix CVE-2009-3002?
To fix CVE-2009-3002, update your Linux kernel to version 2.6.31 or later.
Who is affected by CVE-2009-3002?
CVE-2009-3002 affects local users on systems running vulnerable versions of the Linux kernel prior to 2.6.31.
What type of attack does CVE-2009-3002 enable?
CVE-2009-3002 enables local users to read sensitive kernel memory contents through specific socket calls.
Is CVE-2009-3002 a remote vulnerability?
No, CVE-2009-3002 is a local vulnerability that requires access to the system by an authenticated user.