NetSight
IP …
low2.1

CVE-2009-2910

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, whic…

Impact

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.31.4
SuseLinux Enterprise Debuginfo
Version 10
OpensuseOpensuse
Version 11.0
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Server
Versions 9, 10
SuseLinux Enterprise Software Development Kit
Version 10
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04, 9.10
RedhatVirtualization
Version 5
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Eus
Version 5.4
RedhatEnterprise Linux Server
Version 5.0
RedhatEnterprise Linux Workstation
Version 5.0

Weakness classification

CWE-200

References