Description
The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.
References (25)
... and 5 more
Scores
EPSS
0.0008
EPSS Percentile
22.7%
Details
CWE
CWE-909
Status
published
Products (11)
canonical/ubuntu_linux
6.06
canonical/ubuntu_linux
8.04
canonical/ubuntu_linux
8.10
canonical/ubuntu_linux
9.04
canonical/ubuntu_linux
9.10
linux/linux_kernel
2.6.31 (9 CPE variants)
linux/linux_kernel
2.4.0 - 2.4.37.6
redhat/enterprise_linux_desktop
5.0
redhat/enterprise_linux_eus
5.4
redhat/enterprise_linux_server
5.0
... and 1 more
Published
Oct 19, 2009
Tracked Since
Feb 18, 2026