CVE-2009-1192 describes an information disclosure vulnerability in the Linux kernel's agp subsystem, specifically affecting versions prior to 2.6.30-rc3. The flaw lies in the agp_generic_alloc_page and agp_generic_alloc_pages functions, which fail to zero out memory pages after use. This oversight allows local users to potentially access sensitive information by reading these uninitialized pages. With a CVSS score of 4.9 (AV:L/AC:L/Au:N/C:C/I:N/A:N), the vulnerability is of medium severity, requiring local access with low attack complexity to achieve a complete confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.6.30CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:rc2:*:*:*:*:*:* | ||
2.2.27CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:* | ||
2.4.36CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* | ||
2.4.36.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* | ||
2.4.36.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.