CVE-2009-3001

CVE-2009-3001 describes a kernel memory disclosure vulnerability in the Linux kernel, affecting versions up to 2.6.31-rc7, including Canonical and Ubuntu Linux distributions. Local users can exploit this flaw by calling getsockname on an AF_LLC socket, due to an uninitialized data structure in the llc_ui_getname function. This allows for the reading of kernel memory contents. The vulnerability has a CVSS score of 4.9, indicating a local attack vector with low complexity and a high impact on confidentiality, but no impact on integrity or availability. While there is a public exploit available on ExploitDB, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.