CVE-2009-3612

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.37.6 and earlier Linux kernel versions 2.6.x before 2.6.32-rc5

Description The issue is related to the tcf fill node function in the netlink subsystem, which does not initialize a certain structure member. This might allow local users to obtain sensitive information from kernel memory.

Recommendations For Linux kernel versions 2.4.37.6 and earlier, update to a version later than 2.4.37.6. For Linux kernel versions 2.6.x before 2.6.32-rc5, update to version 2.6.32-rc5 or later.