CVE-2009-0676 Information disclosure in n/a
Local attackers can read sensitive kernel memory via a specific getsockopt request due to uninitialized structure members in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-0676?
CVE-2009-0676 is a low-severity vulnerability in Linux kernel, published on 22 Feb 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.
Weakness: CWE-264
Which versions are affected by CVE-2009-0676?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2009-0676?
Upgrade to a fixed version.
Is CVE-2009-0676 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-0676 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-863c-wrq8-v36v.