CVE-2009-0676

The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to…

published February 22, 2009

CVSS
—
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Published
2009-02-22T22:00Z
EPSS history
Timeline
  • 22 FEB 22:00Z
    The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to…
    cvelistv5