Security Advisory

CVE-2009-1192

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-04-24 15:00:00
Last updated 2024-08-07 05:04:49
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.