CVE-2009-3002

CVE-2009-3002 is a local information disclosure vulnerability affecting the Linux kernel before version 2.6.31-rc7, including Canonical Ubuntu Linux distributions. It allows local users to read uninitialized kernel memory by calling getsockname on specific socket types (AF_APPLETALK, AF_IRDA, AF_ECONET, AF_NETROM, AF_ROSE, or raw CAN sockets). The vulnerability has a CVSS score of 4.9, indicating a medium severity, with a local attack vector and low attack complexity, leading to a complete compromise of confidentiality (C:C). While not actively exploited in the wild according to KEV, exploit code for specific instances (atalk_getname and irda_getname) is publicly available on ExploitDB, though there is no significant community discussion or media coverage surrounding this CVE.