Name: CVE-2009-2910: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2009-10-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2009-2910, CWE-200, CVSS 5.5, EPSS 0.00052

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.

CVSS Details

CVSS 3.1 Base Score: 5.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-debug-develUpgrade kernel-hugemem-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-hugememUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-smp-develUpgrade kernel-smpUpgrade kernel-xenUUpgrade kernel-xenU-devel	Dec 1, 2016	Oct 20, 2009
Oracle_linux	—	Upgrade kernel	Oct 2, 2018	Oct 20, 2009
Suse	—	Upgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade ext4dev-kmp-vmiUpgrade oracleasm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-vmiUpgrade kernel-paeUpgrade ext4dev-kmp-ppc64Upgrade ext4dev-kmp-defaultUpgrade kernel-kdumpUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-paeUpgrade kernel-default-baseUpgrade kernel-vmi-baseUpgrade kernel-ppc64Upgrade iscsitarget-kmp-defaultUpgrade kernel-default	Feb 17, 2015	Jul 9, 2013
Ubuntu	—	Upgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.31-16-ia64Upgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.27-16-generic	Nov 8, 2024	Oct 20, 2009
Vmsa 2010 0009 1 Service Console Update	—	Upgrade VMware ESX 4.0 to build number 256968	Sep 2, 2010	Oct 20, 2009

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence