NetSight
IP …
medium4.9Public exploit code

CVE-2009-3001

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local use…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.31
Version 2.6.31
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04

Weakness classification

CWE-200

References