CVE-2002-1571

Linux 2.4 <2.4.19 - Info Disclosure

Title source: llm

Description

The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.

References (5)

[Various Sources] http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6

[Various Sources] http://search.luky.org/linux-kernel.2002/msg24003.html

[Various Sources] http://search.luky.org/linux-kernel.2002/msg24992.html

[Various Sources] http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html

[Various Sources] http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html

Scores

EPSS 0.0008

EPSS Percentile 22.3%

Classification

Status draft

Affected Products (47)

linux/linux_kernel

... and 32 more

Timeline

Published Dec 31, 2002

Tracked Since Feb 18, 2026