Lucene search

K
cvelistRedhatCVELIST:CVE-2009-3612
HistoryOct 19, 2009 - 7:27 p.m.

CVE-2009-3612

2009-10-1919:27:00
redhat
www.cve.org
1

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.

References