CVE-2008-2729

Linux Kernel < 2.6.19 - Information Exposure via Exception During Memory Copy

Title source: llm

Description

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

References (17)

Core 17

Core References

Patch x_refsource_confirm

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=3022d734a54cbd2b65eea9a024564821101b4a9a%3Bhp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff

Tool Signature vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11571

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2008/dsa-1630

Broken Link vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0519.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43558

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30849

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020364

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31551

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30850

Broken Link vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0585.html

Broken Link vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2008:174

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31107

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=451271

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/29943

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31628

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-625-1

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2008-0508.html

Scores

EPSS 0.0057

EPSS Percentile 43.2%

Details

CWE

CWE-200

Status published

Products (1)

linux/linux_kernel < 2.6.19

Published Jun 30, 2008

Tracked Since Feb 18, 2026