CVE-2009-2910 Information disclosure in n/a

What is CVE-2009-2910?

CVE-2009-2910 is a low-severity vulnerability in Canonical Ubuntu Linux, published on 20 Oct 2009. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.

Weakness: CWE-200

Which versions are affected by CVE-2009-2910?

It affects 13 products.

Products include Canonical Ubuntu Linux, Fedoraproject Fedora, Linux kernel, Opensuse Opensuse, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Eus and 7 more.

How do I fix CVE-2009-2910?

Upgrade to a fixed version.

Is CVE-2009-2910 being exploited?

There is no known exploitation of CVE-2009-2910 in the wild and no public exploit code.

Other vulnerabilities in Canonical Ubuntu Linux

• CVE-2020-11651 SaltStack Salt Authentication Bypass Exploited Critical 9.8
• CVE-2020-7247 OpenSMTPD Remote Code Execution Exploited Critical 9.8
• CVE-2019-16928 Exim Out-of-bounds Write Exploited Critical 9.8
• CVE-2018-6789 Exim Buffer Overflow Exploited Critical 9.8
• CVE-2015-2590 Oracle Java SE and Java SE Embedded Remote Code Execution Exploited Critical 9.8

All Canonical Ubuntu Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5pv7-vwpf-wfrm.