Every CVE Search/ Get API key

CVE-2009-3002

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname...

4.9 MediumPublic exploitFix available

CVE-2009-3002 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published August 28, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 63rd percentile. Fixed in linux-2.6 2.6.26-19lenny1.

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Exploit likelihood

1.03%Down 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.9

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Record
CVE-2009-3002
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Record
CVE-2009-3002
Updated
2026-11-02
EUVDEUVD-2009-2987 No score

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Record
EUVD-2009-2987
Updated
2026-11-03
GitHub AdvisoriesGHSA-6v8v-wc26-56rj No score

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname...

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Record
GHSA-6v8v-wc26-56rj
Weakness
CWE-200
Updated
2026-11-02
OSVBELL-CVE-2009-3002 4.9

CVE-2009-3002 does not affect BellSoft software

Record
BELL-CVE-2009-3002
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:5.0
 before 2.6.26-19lenny1, plus listed versions
2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15
Show 14 moreShow less
2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19~bpo40+1
2.6.26-19lenny1
linux-2.6.24
Debian:4.0
 before 2.6.24-6~etchnhalf.9etch1, plus listed versions
2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4
Show 8 moreShow less
2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.82.6.24-6~etchnhalf.8etch12.6.24-6~etchnhalf.8etch22.6.24-6~etchnhalf.8etch32.6.24-6~etchnhalf.9
2.6.24-6~etchnhalf.9etch1
linux-2.6
Debian:4.0
 before 2.6.18.dfsg.1-26etch1, plus listed versions
2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1
Show 32 moreShow less
2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch42.6.18.dfsg.1-18etch52.6.18.dfsg.1-18etch62.6.18.dfsg.1-192.6.18.dfsg.1-202.6.18.dfsg.1-212.6.18.dfsg.1-222.6.18.dfsg.1-22etch12.6.18.dfsg.1-22etch22.6.18.dfsg.1-22etch32.6.18.dfsg.1-232.6.18.dfsg.1-23etch12.6.18.dfsg.1-242.6.18.dfsg.1-24etch12.6.18.dfsg.1-24etch22.6.18.dfsg.1-24etch32.6.18.dfsg.1-24etch42.6.18.dfsg.1-26
2.6.18.dfsg.1-26etch1
kernel-rt
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-debug
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-debuginfo-common
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
Show 47 moreShow less
Affected packages
PackageAffectedFixed
kernel-rt-doc
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-trace
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-137.el5rt
0:2.6.24.7-137.el5rt
kernel
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-BOOT
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-doc
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-source
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-unsupported
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-BOOT
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-doc
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-source
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-unsupported
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-BOOT
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-doc
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-source
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-unsupported
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-BOOT
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-doc
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-source
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL
kernel-unsupported
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-63.EL
0:2.4.21-63.EL

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLinux Kernel 2.6.30 - 'atalk_getname()' 8-bytes Stack Disclosure (1)2009-08-26
Exploit-DBLinux Kernel < 2.6.31-rc7 - 'AF_IRDA' 29-Byte Stack Disclosure (2)2009-08-31

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 114 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open