CVE-2009-3001

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does...

4.9 MediumPublic exploit

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.

Exploit likelihood

1.02%Down 2.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.9

Record: CVE-2009-3001
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-3001
Updated: 2026-11-02

EUVDEUVD-2009-2986 No score

Record: EUVD-2009-2986
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5pcq-rhwq-4w2j No score

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does...

Record: GHSA-5pcq-rhwq-4w2j
Weakness: CWE-200
Updated: 2026-11-02

OSVBELL-CVE-2009-3001 4.9

CVE-2009-3001 does not affect BellSoft software

Record: BELL-CVE-2009-3001
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-2.6` Debian:5.0 From an advisory covering 10 CVEs	before 2.6.26-19lenny1, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15 Show 14 moreShow less 2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19~bpo40+1	2.6.26-19lenny1
`linux-2.6.24` Debian:4.0 From an advisory covering 18 CVEs	before 2.6.24-6~etchnhalf.9etch1, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 Show 8 moreShow less 2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.82.6.24-6~etchnhalf.8etch12.6.24-6~etchnhalf.8etch22.6.24-6~etchnhalf.8etch32.6.24-6~etchnhalf.9	2.6.24-6~etchnhalf.9etch1
`linux-2.6` Debian:4.0 From an advisory covering 10 CVEs	before 2.6.18.dfsg.1-26etch1, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 32 moreShow less 2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch42.6.18.dfsg.1-18etch52.6.18.dfsg.1-18etch62.6.18.dfsg.1-192.6.18.dfsg.1-202.6.18.dfsg.1-212.6.18.dfsg.1-222.6.18.dfsg.1-22etch12.6.18.dfsg.1-22etch22.6.18.dfsg.1-22etch32.6.18.dfsg.1-232.6.18.dfsg.1-23etch12.6.18.dfsg.1-242.6.18.dfsg.1-24etch12.6.18.dfsg.1-24etch22.6.18.dfsg.1-24etch32.6.18.dfsg.1-24etch42.6.18.dfsg.1-26	2.6.18.dfsg.1-26etch1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Linux Kernel 2.6.31-rc7 - 'AF_LLC getsockname' 5-Byte Stack Disclosure	2009-08-25

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3001 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published August 28, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.02%, the 63rd percentile. No source names a fixed version.

References

Show 7 moreShow less