CVE-2009-3001
Linux Kernel < 2.6.31 - Uninitialized Memory Exposure via llc_ui_getname
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-3001. PoCs published by Jon Oberheide.
AI-analyzed exploit summary This exploit demonstrates a 5-byte kernel stack information leak via AF_LLC getsockname() in Linux Kernel <= 2.6.31-rc7. It creates an AF_LLC socket, binds it, and repeatedly calls getsockname() to disclose uninitialized stack memory.
Description
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.
Exploits (1)
This exploit demonstrates a 5-byte kernel stack information leak via AF_LLC getsockname() in Linux Kernel <= 2.6.31-rc7. It creates an AF_LLC socket, binds it, and repeatedly calls getsockname() to disclose uninitialized stack memory.