CVE-2009-3228 (retired)

Priority
Description
The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in
the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not
initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which
might allow local users to obtain sensitive information from kernel memory
via unspecified vectors.
Package
Upstream:released (2.6.31~rc9)
More Information

Updated: 2019-03-26 11:49:01 UTC (commit ccdecfcf0fead22bd291e5f4ea745a46872dcb15)