CVE-2008-2729

CVSS v2.0 4.9 (Medium)

EPSS 0.04 % (11^th)

Affected Products 1

Advisories 2

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

Weaknesses

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2008-06-30 22:41:00
(16 years ago)
Updated Date: 2023-11-07 02:02:17
(10 months ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 2.6.19 version	cpe:2.3:o:linux:linux_kernel		< 2.6.19