The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before…
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Complete · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-200.
Summary
The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 97
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:* | 2.4.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:* | 2.4.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:* | 2.4.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:* | 2.4.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:* | 2.4.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:* | 2.4.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:* | 2.4.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:* | 2.4.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:* | 2.4.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:* | 2.4.10 | Vulnerable | Linux |
- cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:* Versions 2.4.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:* Versions 2.4.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:* Versions 2.4.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:* Versions 2.4.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:* Versions 2.4.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:* Versions 2.4.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:* Versions 2.4.10 Vulnerable ·Linux
Show 87 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:* | 2.4.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:* | 2.4.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:* | 2.4.13 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:* | 2.4.14 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:* | 2.4.15 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:* | 2.4.16 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:* | 2.4.17 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:* | 2.4.18 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:* | 2.4.19 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:* | 2.4.20 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:* | 2.4.21 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:* | 2.4.22 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:* | 2.4.23 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:* | 2.4.24 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:* | 2.4.25 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:* | 2.4.26 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:* | 2.4.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre1:*:*:*:*:* | 2.4.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre2:*:*:*:*:* | 2.4.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre3:*:*:*:*:* | 2.4.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre4:*:*:*:*:* | 2.4.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre5:*:*:*:*:* | 2.4.27 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:* | 2.4.28 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:* | 2.4.29 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:* | 2.4.30 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:* | 2.4.30 rc2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:* | 2.4.30 rc3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:* | 2.4.31 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:* | 2.4.32 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:* | 2.4.33 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33.1:*:*:*:*:*:*:* | 2.4.33.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:* | 2.4.33.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:* | 2.4.33.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:* | 2.4.33.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:* | 2.4.33.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.33.7:*:*:*:*:*:*:* | 2.4.33.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:* | 2.4.34 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:* | 2.4.34.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:* | 2.4.34.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34.3:*:*:*:*:*:*:* | 2.4.34.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34.4:*:*:*:*:*:*:* | 2.4.34.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34.5:*:*:*:*:*:*:* | 2.4.34.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.34.6:*:*:*:*:*:*:* | 2.4.34.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.35.1:*:*:*:*:*:*:* | 2.4.35.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:* | 2.4.35.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.35.3:*:*:*:*:*:*:* | 2.4.35.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.35.4:*:*:*:*:*:*:* | 2.4.35.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.35.5:*:*:*:*:*:*:* | 2.4.35.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* | 2.4.36 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* | 2.4.36.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* | 2.4.36.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:* | 2.4.36.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:* | 2.4.36.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:* | 2.4.36.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:* | 2.4.36.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.7:*:*:*:*:*:*:* | 2.4.36.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.8:*:*:*:*:*:*:* | 2.4.36.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.36.9:*:*:*:*:*:*:* | 2.4.36.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.37:*:*:*:*:*:*:* | 2.4.37 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.37.1:*:*:*:*:*:*:* | 2.4.37.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.37.2:*:*:*:*:*:*:* | 2.4.37.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.37.3:*:*:*:*:*:*:* | 2.4.37.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.37.4:*:*:*:*:*:*:* | 2.4.37.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.4.37.5:*:*:*:*:*:*:* | 2.4.37.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* | 2.6.0 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:* | 2.6.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:* | 2.6.10 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:* | 2.6.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:* | 2.6.11.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:* | 2.6.11.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:* | 2.6.11.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:* | 2.6.11.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:* | 2.6.11.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:* | 2.6.11.6 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:* | 2.6.11.7 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:* | 2.6.11.8 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:* | 2.6.11.9 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:* | 2.6.11.10 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:* | 2.6.11.11 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:* | 2.6.11.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:* | 2.6.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:* | 2.6.12.1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:* | 2.6.12.2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:* | 2.6.12.3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:* | 2.6.12.4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:* | 2.6.12.5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:* | 2.6.12.6 | Vulnerable | Linux |
- cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:* Versions 2.4.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:* Versions 2.4.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:* Versions 2.4.13 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:* Versions 2.4.14 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:* Versions 2.4.15 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:* Versions 2.4.16 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:* Versions 2.4.17 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:* Versions 2.4.18 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:* Versions 2.4.19 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:* Versions 2.4.20 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:* Versions 2.4.21 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:* Versions 2.4.22 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:* Versions 2.4.23 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:* Versions 2.4.24 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:* Versions 2.4.25 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:* Versions 2.4.26 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:* Versions 2.4.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre1:*:*:*:*:* Versions 2.4.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre2:*:*:*:*:* Versions 2.4.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre3:*:*:*:*:* Versions 2.4.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre4:*:*:*:*:* Versions 2.4.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.27:*:-pre5:*:*:*:*:* Versions 2.4.27 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:* Versions 2.4.28 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:* Versions 2.4.29 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:* Versions 2.4.30 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:* Versions 2.4.30 rc2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:* Versions 2.4.30 rc3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:* Versions 2.4.31 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:* Versions 2.4.32 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:* Versions 2.4.33 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33.1:*:*:*:*:*:*:* Versions 2.4.33.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:* Versions 2.4.33.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:* Versions 2.4.33.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:* Versions 2.4.33.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:* Versions 2.4.33.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.33.7:*:*:*:*:*:*:* Versions 2.4.33.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:* Versions 2.4.34 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:* Versions 2.4.34.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:* Versions 2.4.34.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34.3:*:*:*:*:*:*:* Versions 2.4.34.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34.4:*:*:*:*:*:*:* Versions 2.4.34.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34.5:*:*:*:*:*:*:* Versions 2.4.34.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.34.6:*:*:*:*:*:*:* Versions 2.4.34.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.35.1:*:*:*:*:*:*:* Versions 2.4.35.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:* Versions 2.4.35.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.35.3:*:*:*:*:*:*:* Versions 2.4.35.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.35.4:*:*:*:*:*:*:* Versions 2.4.35.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.35.5:*:*:*:*:*:*:* Versions 2.4.35.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* Versions 2.4.36 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* Versions 2.4.36.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* Versions 2.4.36.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.3:*:*:*:*:*:*:* Versions 2.4.36.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.4:*:*:*:*:*:*:* Versions 2.4.36.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.5:*:*:*:*:*:*:* Versions 2.4.36.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.6:*:*:*:*:*:*:* Versions 2.4.36.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.7:*:*:*:*:*:*:* Versions 2.4.36.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.8:*:*:*:*:*:*:* Versions 2.4.36.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.36.9:*:*:*:*:*:*:* Versions 2.4.36.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.37:*:*:*:*:*:*:* Versions 2.4.37 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.37.1:*:*:*:*:*:*:* Versions 2.4.37.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.37.2:*:*:*:*:*:*:* Versions 2.4.37.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.37.3:*:*:*:*:*:*:* Versions 2.4.37.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.37.4:*:*:*:*:*:*:* Versions 2.4.37.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.4.37.5:*:*:*:*:*:*:* Versions 2.4.37.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* Versions 2.6.0 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:* Versions 2.6.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:* Versions 2.6.10 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:* Versions 2.6.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:* Versions 2.6.11.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:* Versions 2.6.11.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:* Versions 2.6.11.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:* Versions 2.6.11.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:* Versions 2.6.11.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:* Versions 2.6.11.6 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:* Versions 2.6.11.7 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:* Versions 2.6.11.8 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:* Versions 2.6.11.9 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:* Versions 2.6.11.10 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:* Versions 2.6.11.11 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:* Versions 2.6.11.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:* Versions 2.6.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:* Versions 2.6.12.1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:* Versions 2.6.12.2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:* Versions 2.6.12.3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:* Versions 2.6.12.4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:* Versions 2.6.12.5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:* Versions 2.6.12.6 Vulnerable ·Linux
Remediation
Red Hat 1 advisory
- RHSA-2009:1522 Released 2009-10-22 · Red Hat rating Moderatekernel security and bug fix update
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-89.0.15.EL, kernel-2.6.9-89.0.15.EL.ia64, kernel-2.6.9-89.0.15.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-89.0.15.EL, kernel-devel-2.6.9-89.0.15.EL, kernel-doc-2.6.9-89.0.15.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-89.0.15.EL, kernel-2.6.9-89.0.15.EL.ia64, kernel-devel-2.6.9-89.0.15.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-89.0.15.EL, kernel-2.6.9-89.0.15.EL.ia64, kernel-devel-2.6.9-89.0.15.EL +12
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2009:1522 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2009:1522 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2009:1522 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2009:1522 |
Timeline
- 2026-10-02 Threatist record created from CVE-2005-4881
- 2026-10-03 Alias added: GHSA-jfwc-rxqw-vvj6
References
Patch 7
- [oss-security] 20090917 Re: CVE request: kernel: tc: uninitialised kernel memory leak
- [oss-security] 20090916 Re: CVE request: kernel: tc: uninitialised kernel memory leak
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1
- [bk-commits-head] 20050629 [NETLINK]: Missing initializations in dumped data
- [oss-security] 20090906 Re: CVE request: kernel: tc: uninitialised kernel memory leak
- [oss-security] 20090907 Re: CVE request: kernel: tc: uninitialised kernel memory leak
- [oss-security] 20090905 Re: CVE request: kernel: tc: uninitialised kernel memory leak
Advisory 3
Other 8
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5
- oval:org.mitre.oval:def:11744
- https://bugzilla.redhat.com/show_bug.cgi?id=521601
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2005-4881 · CVE Program
- CVE-2005-4881 · NVD
- FIRST EPSS
- GHSA-jfwc-rxqw-vvj6 · GitHub Advisory Database · CC BY 4.0
- CVE-2005-4881 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences