CVE-2009-0676

CVE-2009-0676 is an information disclosure vulnerability in the Linux kernel, specifically affecting versions prior to 2.6.28.6. It stems from the sock_getsockopt function failing to initialize a structure member, allowing local users to expose sensitive kernel memory data. With a CVSS score of 2.1, this vulnerability is of low severity, requiring local access with low attack complexity, and its impact is limited to confidentiality. There is no indication of active exploitation, though a proof-of-concept exploit is available on ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness.