Linux Kernel information leak issue

2009.10.22
Credit: Fedora Team
Risk: Low
Local: Yes
Remote: No
CVE: CVE-2009-2910
CWE: CWE-200


CVSS Base Score: 4.9/10
Impact Subscore: 6.9/10
Exploitability Subscore: 3.9/10
Exploit range: Local
Attack complexity: Low
Authentication: No required
Confidentiality impact: Complete
Integrity impact: None
Availability impact: None

Hi Steve, There is an information leak issue in the Linux Kernel: http://lkml.org/lkml/2009/10/1/164 It seems that an ia32 process running on an ia64 machine could see register contents from a previous process. Thanks.

References:

https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html
https://bugzilla.redhat.com/show_bug.cgi?id=526788
http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git;a=commit;h=24e35800cdc4350fc34e2bed37b608a9e13ab3b6
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4
http://secunia.com/advisories/37075
http://secunia.com/advisories/36927
http://marc.info/?l=oss-security&m=125511635004768&w=2
http://marc.info/?l=oss-security&m=125444390112831&w=2
http://marc.info/?l=oss-security&m=125442304214452&w=2
http://lkml.org/lkml/2009/10/1/164


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top