CVE-2009-3002

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2009-3002
StatePUBLISHED
Assignermitre
Source PriorityCVE Program / NVD first with legacy fallback
Published2009-08-28 15:30:00 UTC
Updated2026-04-23 00:35:47 UTC
DescriptionThe Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Risk And Classification

Primary CVSS: v2.0 4.9 from [email protected]

AV:L/AC:L/Au:N/C:C/I:N/A:N

Problem Types: CWE-200 | n/a

CVSS v2.0 Breakdown

Access Vector
Local
Access Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
None
Availability
None

AV:L/AC:L/Au:N/C:C/I:N/A:N

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Canonical Ubuntu Linux 6.06 All All All
Operating System Canonical Ubuntu Linux 8.04 All All All
Operating System Canonical Ubuntu Linux 8.10 All All All
Operating System Canonical Ubuntu Linux 9.04 All All All
Operating System Linux Linux Kernel All All All All
Operating System Linux Linux Kernel 2.6.31 - All All
Operating System Linux Linux Kernel 2.6.31 rc1 All All
Operating System Linux Linux Kernel 2.6.31 rc2 All All
Operating System Linux Linux Kernel 2.6.31 rc3 All All
Operating System Linux Linux Kernel 2.6.31 rc4 All All
Operating System Linux Linux Kernel 2.6.31 rc5 All All
Operating System Linux Linux Kernel 2.6.31 rc6 All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Na N/a affected n/a Not specified

References

ReferenceSourceLinkTags
rhn.redhat.com | Red Hat Support af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
Linux Kernel <= 2.6.30 atalk_getname() 8-bytes Stack Disclosure Exploit af854a3a-2127-422b-91ae-364da2661108 www.exploit-db.com Third Party Advisory, VDB Entry
RETIRED: Linux Kernel 'net/appletalk/ddp.c' Local Information Disclosure Vulnerability af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Exploit, Third Party Advisory, VDB Entry
kernel/git/torvalds/linux.git - Linux kernel source tree af854a3a-2127-422b-91ae-364da2661108 git.kernel.org
Ubuntu update for kernel - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Third Party Advisory
oss-security - Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure af854a3a-2127-422b-91ae-364da2661108 www.openwall.com Mailing List, Third Party Advisory
519305 – (CVE-2009-3001, CVE-2009-3002) CVE-2009-3001, CVE-2009-3002 kernel: numerous getname() infoleaks af854a3a-2127-422b-91ae-364da2661108 bugzilla.redhat.com Exploit, Issue Tracking, Third Party Advisory
Repository / Oval Repository af854a3a-2127-422b-91ae-364da2661108 oval.cisecurity.org Third Party Advisory
kernel/git/torvalds/linux.git - Linux kernel source tree af854a3a-2127-422b-91ae-364da2661108 git.kernel.org
git.kernel.org af854a3a-2127-422b-91ae-364da2661108 git.kernel.org
Repository / Oval Repository af854a3a-2127-422b-91ae-364da2661108 oval.cisecurity.org Third Party Advisory
SUSE update for kernel - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Third Party Advisory
USN-852-1: Linux kernel vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 www.ubuntu.com Third Party Advisory
oss-security - Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure af854a3a-2127-422b-91ae-364da2661108 www.openwall.com Mailing List, Third Party Advisory
[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
kernel/git/torvalds/linux.git - Linux kernel source tree af854a3a-2127-422b-91ae-364da2661108 git.kernel.org
[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
kernel/git/torvalds/linux.git - Linux kernel source tree af854a3a-2127-422b-91ae-364da2661108 git.kernel.org
[security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:20 af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
404: File not found af854a3a-2127-422b-91ae-364da2661108 www.kernel.org Vendor Advisory
git.kernel.org af854a3a-2127-422b-91ae-364da2661108 git.kernel.org
About Secunia Research | Flexera af854a3a-2127-422b-91ae-364da2661108 secunia.com Third Party Advisory
SecurityFocus af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Third Party Advisory, VDB Entry
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

OrganizationPublishedContributorStatement
Red Hat2009-11-04Tomas HogerCVE-2009-3002 describes a collection of similar information leaks that affect numerous networking protocols. The Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 did not enable support for the AppleTalk DDP protocol, and therefore were not affected by issue (1). It was addressed in Red Hat Enterprise Linux 3 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1550.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively. The Linux kernel as shipped with Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG did not enable support for IrDA sockets, and therefore were not affected by issue (2). It was addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not enable support for the Acorn Econet and AUN protocols, and therefore were not affected by issue (3). The Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG did not enable support for the NET/ROM and ROSE protocols, and therefore were not affected by issues (4) and (5). They were addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html The raw_getname() leak was introduced in the Linux kernel version 2.6.25-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG therefore were not affected by issue (6).

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report