Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2847. PoCs published by Jon Oberheide.
AI-analyzed exploit summary This exploit demonstrates an information leak vulnerability in the Linux Kernel <= 2.6.31-rc5, where uninitialized kernel stack data is disclosed via padding bytes in the stack_t structure during sigaltstack calls on 64-bit systems.
Description
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
Exploits (1)
This exploit demonstrates an information leak vulnerability in the Linux Kernel <= 2.6.31-rc5, where uninitialized kernel stack data is disclosed via padding bytes in the stack_t structure during sigaltstack calls on 64-bit systems.