CVE-2009-3228
- State
- Published
- Severity
- Not scored
- Published
- Oct 19, 2009
- Updated
- Aug 7, 2024
- Reserved
- Sep 16, 2009
Description
The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20090917 Re: CVE request: kernel: tc: uninitialised kernel memory leakmailing-list
- [oss-security] 20090916 Re: CVE request: kernel: tc: uninitialised kernel memory leakmailing-list
- RHSA-2009:1540vendor-advisory
- USN-864-1vendor-advisory
- 38794third-party-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updatesmailing-list
- MDVSA-2010:198vendor-advisory
- [oss-security] 20090903 CVE request: kernel: tc: uninitialised kernel memory leakmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=520990
- 37084third-party-advisory
- RHSA-2009:1522vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6
- oval:org.mitre.oval:def:9409vdb-entrysignature
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=096ed17f20affc2db0e307658c69b67433992a7a
- RHSA-2009:1548vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.31/ChangeLog-2.6.31-rc9
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16ebb5e0b36ceadc8186f71d68b0c4fa4b6e781b
- 38834third-party-advisory
- [oss-security] 20090906 Re: CVE request: kernel: tc: uninitialised kernel memory leakmailing-list
- [oss-security] 20090907 Re: CVE request: kernel: tc: uninitialised kernel memory leakmailing-list
- [oss-security] 20090905 Re: CVE request: kernel: tc: uninitialised kernel memory leakmailing-list
- 1023073vdb-entry
- http://patchwork.ozlabs.org/patch/32830/
- oval:org.mitre.oval:def:6757vdb-entrysignature
- ADV-2010-0528vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.