{"id":"CVE-2002-1571","aliases":["BELL-CVE-2002-1571","EUVD-2002-1552","GHSA-g537-q8gc-5484"],"status":"published","title":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers,...","description":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00401,"percentile":0.3461,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2002-12-31T05:00:00Z","modified":"2026-06-16T21:59:34Z","products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://search.luky.org/linux-kernel.2002/msg24003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://search.luky.org/linux-kernel.2002/msg24992.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1571"},{"url":"http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c@1.6"},{"url":"https://github.com/advisories/GHSA-g537-q8gc-5484"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2002-1571","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2002-1571","description":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.","status":"published","published":"2006-01-23T22:00:00Z","modified":"2024-08-08T03:26:28.98Z","updated_at":"2026-11-02T14:33:54.641433Z"}],"euvd":[{"id":"EUVD-2002-1552","description":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.","status":"published","published":"2006-01-23T22:00:00Z","modified":"2024-08-08T03:26:28Z","updated_at":"2026-11-03T01:14:55.73497Z"}],"ghsa":[{"id":"GHSA-g537-q8gc-5484","title":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers,...","description":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.","status":"published","published":"2022-04-30T18:21:27Z","modified":"2025-04-03T03:50:46Z","updated_at":"2026-11-02T15:00:37.983289Z"}],"nvd":[{"id":"CVE-2002-1571","description":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.","status":"published","published":"2002-12-31T05:00:00Z","modified":"2026-06-16T21:59:34.49Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}],"osv":[{"id":"BELL-CVE-2002-1571","title":"CVE-2002-1571 does not affect BellSoft software","status":"withdrawn","published":"2002-12-31T05:00:00Z","modified":"2026-02-10T09:09:21.444838Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:12.886815Z"}]}}