CVE-2009-0676

Name of the Vulnerable Software and Affected Versions linux-image-2.6.26-1-alpha-smp versions 2.6.26-1 linux-image-2.6.26-1-vserver-powerpc64 versions 2.6.26-1 linux-image-2.6.26-1-vserver-itanium versions 2.6.26-1 linux-headers-2.6.26-1-powerpc versions 2.6.26-1 linux-image-2.6.26-1-r4k-ip22 versions 2.6.26-1 kernel-s390-debug versions 2.6.26-1 kexec-tools versions 2.6.26-1 linux-image-2.6.26-1-vserver-amd64 versions 2.6.26-1 linux-headers-2.6.26-1-itanium versions 2.6.26-1 linux-headers-2.6.26-1-all-i386 versions 2.6.26-1 linux-image-2.6.26-1-mckinley versions 2.6.26-1 linux-image-2.6.26-1-vserver-686-bigmem versions 2.6.26-1 um-host-install-initrd versions 2.6.26-1 kernel-iseries64-debuginfo versions 2.6.26-1 linux-headers-2.6.26-1-vserver-amd64 versions 2.6.26-1 linux-headers-2.6.26-1-all-mipsel versions 2.6.26-1 linux-headers-2.6.26-1-vserver-s390x versions 2.6.26-1 module-init-tools-debugsource versions 2.6.26-1 linux-image-2.6.26-1-powerpc-smp versions 2.6.26-1 linux-headers-2.6.26-1-all-amd64 versions 2.6.26-1 linux-headers-2.6.26-1-parisc versions 2.6.26-1 acerhk-kmp-debug versions 2.6.26-1 kernel-sn2 versions 2.6.26-1 linux-headers-2.6.26-1-common-openvz versions 2.6.26-1 kernel-xen-base versions 2.6.26-1 linux-headers-2.6.26-1-all-alpha versions 2.6.26-1 linux-headers-2.6.26-1-r4k-ip22 versions 2.6.26-1 linux-headers-2.6.26-1-mckinley versions 2.6.26-1 linux-headers-2.6.26-1-openvz-686 versions 2.6.26-1 linux-headers-2.6.26-1-vserver-686 versions 2.6.26-1 gspcav-kmp-debug versions 2.6.26-1 nouveau-kmp-debug versions 2.6.26-1 kernel-bigsmp-debuginfo versions 2.6.26-1 module-init-tools-debuginfo versions 2.6.26-1 linux-image-2.6.26-1-4kc-malta versions 2.6.26-1 linux-image-2.6.26-1-486 versions 2.6.26-1 linux-image-2.6.26-1-parisc-smp versions 2.6.26-1 linux-headers-2.6.26-1-all versions 2.6.26-1 linux-headers-2.6.26-1-s390x versions 2.6.26-1 linux-headers-2.6.26-1-sparc64-smp versions 2.6.26-1 kernel-pseries64 versions 2.6.26-1 linux-image-2.6.26-1-vserver-powerpc versions 2.6.26-1 module-init-tools versions 2.6.26-1 kernel-pmac64 versions 2.6.26-1 linux-headers-2.6.26-1-parisc64-smp versions 2.6.26-1 kernel-s390x-debug versions 2.6.26-1 linux-image-2.6.26-1-sb1-bcm91250a versions 2.6.26-1 linux-headers-2.6.26-1-vserver-mckinley versions 2.6.26-1 linux-headers-2.6.26-1-all-ia64 versions 2.6.26-1 kernel-ec2-base versions 2.6.26-1 linux-image-2.6.26-1-vserver-sparc64 versions 2.6.26-1 ext4dev-kmp-default versions 2.6.26-1 linux-headers-2.6.26-1-all-hppa versions 2.6.26-1 linux-image-2.6.26-1-parisc64-smp versions 2.6.26-1 um-host-kernel versions 2.6.26-1 linux-headers-2.6.26-1-all-arm versions 2.6.26-1 linux-image-2.6.26-1-s390-tape versions 2.6.26-1 ocfs2-kmp-xen versions 2.6.26-1 linux-headers-2.6.26-1-4kc-malta versions 2.6.26-1 linux-headers-2.6.26-1-parisc-smp versions 2.6.26-1 kernel-um versions 2.6.26-1 kernel-default-extra versions 2.6.26-1 kernel-s390 versions 2.6.26-1 linux-headers-2.6.26-1-openvz-amd64 versions 2.6.26-1 linux-image-2.6.26-1-alpha-legacy versions 2.6.26-1 linux-image-2.6.26-1-openvz-686 versions 2.6.26-1 linux-headers-2.6.26-1-vserver-powerpc versions 2.6.26-1 linux-headers-2.6.26-1-s390 versions 2.6.26-1 linux-image-2.6.26-1-xen-686 versions 2.6.26-1 linux-headers-2.6.26-1-common versions 2.6.26-1 kernel-ppc64-debugsource versions 2.6.26-1 linux-image-2.6.26-1-686-bigmem versions 2.6.26-1 kernel-xenpae-debuginfo versions 2.6.26-1 linux-headers-2.6.26-1-sb1a-bcm91480b versions 2.6.26-1 linux-image-2.6.26-1-s390x versions 2.6.26-1 linux-image-2.6.26-1-parisc versions 2.6.26-1

Description The issue is related to multiple vulnerabilities in various Linux kernel packages. These vulnerabilities can be exploited remotely, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The sock getsockopt function in the Linux kernel does not initialize a certain structure member, allowing local users to obtain potentially sensitive information from kernel memory via an SO BSDCOMPAT getsockopt request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.