CVE-2009-1265

CVE-2009-1265 describes an integer overflow vulnerability in the rose_sendmsg function within the Linux kernel (versions 2.6.24.4 and prior to 2.6.30-rc1). This flaw allows remote attackers to potentially obtain sensitive information by providing a large length value, leading to the transmission of uninitialized memory. The vulnerability has a CVSS score of 5.0, indicating a medium severity risk with a network attack vector and low attack complexity, resulting in a potential compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.