CVE-2009-3001

Summary

CVE	CVE-2009-3001
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2009-08-28 15:30:00 UTC
Updated	2026-04-23 00:35:47 UTC
Description	The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.

Primary CVSS: v2.0 4.9 from [email protected]

AV:L/AC:L/Au:N/C:C/I:N/A:N

Problem Types: CWE-200 | n/a

Access Vector

Local

Access Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

AV:L/AC:L/Au:N/C:C/I:N/A:N

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Canonical	Ubuntu Linux	6.06	All	All	All
Operating System	Canonical	Ubuntu Linux	8.04	All	All	All
Operating System	Canonical	Ubuntu Linux	8.10	All	All	All
Operating System	Canonical	Ubuntu Linux	9.04	All	All	All
Operating System	Linux	Linux Kernel	All	All	All	All
Operating System	Linux	Linux Kernel	2.6.31	-	All	All
Operating System	Linux	Linux Kernel	2.6.31	rc1	All	All
Operating System	Linux	Linux Kernel	2.6.31	rc2	All	All
Operating System	Linux	Linux Kernel	2.6.31	rc3	All	All
Operating System	Linux	Linux Kernel	2.6.31	rc4	All	All
Operating System	Linux	Linux Kernel	2.6.31	rc5	All	All
Operating System	Linux	Linux Kernel	2.6.31	rc6	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
Linux Kernel <= 2.6.31-rc7 AF_LLC getsockname 5-Byte Stack Disclosure	af854a3a-2127-422b-91ae-364da2661108	www.exploit-db.com	Third Party Advisory, VDB Entry
Ubuntu update for kernel - Secunia Advisories - Vulnerability Information - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com	Third Party Advisory, VDB Entry
519305 – (CVE-2009-3001, CVE-2009-3002) CVE-2009-3001, CVE-2009-3002 kernel: numerous getname() infoleaks	af854a3a-2127-422b-91ae-364da2661108	bugzilla.redhat.com	Exploit, Issue Tracking, Third Party Advisory
USN-852-1: Linux kernel vulnerabilities \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	www.ubuntu.com	Third Party Advisory
jon.oberheide.org/files/llc-getsockname-leak.c	af854a3a-2127-422b-91ae-364da2661108	jon.oberheide.org	Broken Link
oss-security - CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com	Mailing List, Third Party Advisory
git.kernel.org	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org
Linux Kernel 'net/llc/af_llc.c' Local Information Disclosure Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Exploit, Third Party Advisory, VDB Entry
kernel/git/torvalds/linux.git - Linux kernel source tree	MITRE	git.kernel.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Organization	Published	Contributor	Statement
Red Hat	2009-08-31	Tomas Hoger	Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for PF_LLC sockets in the Linux kernels.

There are currently no legacy QID mappings associated with this CVE.