QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-1192

Back to search

CVE-2009-1192

Published: Apr 24, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDVSA-2009:135
vendor-advisory
x_refsource_MANDRIVA
oval:org.mitre.oval:def:10567
vdb-entry
signature
x_refsource_OVAL
37471
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2009:032
vendor-advisory
x_refsource_SUSE
35656
third-party-advisory
x_refsource_SECUNIA
DSA-1794
vendor-advisory
x_refsource_DEBIAN
37351
third-party-advisory
x_refsource_SECUNIA
20090516 rPSA-2009-0084-1 kernel
mailing-list
x_refsource_BUGTRAQ
SUSE-SA:2009:056
vendor-advisory
x_refsource_SUSE
35011
third-party-advisory
x_refsource_SECUNIA
34673
vdb-entry
x_refsource_BID
35120
third-party-advisory
x_refsource_SECUNIA
USN-793-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2009:1081
vendor-advisory
x_refsource_REDHAT
34981
third-party-advisory
x_refsource_SECUNIA
DSA-1800
vendor-advisory
x_refsource_DEBIAN
35343
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:8003
vdb-entry
signature
x_refsource_OVAL
35387
third-party-advisory
x_refsource_SECUNIA
DSA-1787
vendor-advisory
x_refsource_DEBIAN
MDVSA-2009:119
vendor-advisory
x_refsource_MANDRIVA
35121
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2009:054
vendor-advisory
x_refsource_SUSE
ADV-2009-3316
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now