logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2009-0676

Description

The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request. #### Notes Author| Note ---|--- [mdeslaur](<https://launchpad.net/~mdeslaur>) | PoC: http://patchwork.kernel.org/patch/6816/


Affected Package


OS OS Version Package Name Package Version
ubuntu 08.04 linux 2.6.24-23.52
ubuntu 08.10 linux 2.6.27-11.31
ubuntu upstream linux 2.6.29~rc5
ubuntu upstream linux-source-2.6.15 2.6.29~rc5
ubuntu 07.10 linux-source-2.6.22 2.6.22-16.62
ubuntu upstream linux-source-2.6.22 2.6.29~rc5

Related