The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DSA-1787-1 | New Linux 2.6.24 packages fix several vulnerabilities |
![]() |
DSA-1794-1 | New Linux 2.6.18 packages fix several vulnerabilities |
![]() |
DSA-1800-1 | New Linux 2.6.26 packages fix several vulnerabilities |
![]() |
EUVD-2009-1191 | The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages. |
![]() |
USN-793-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T05:04:49.020Z
Reserved: 2009-03-31T00:00:00
Link: CVE-2009-1192

No data.

Status : Deferred
Published: 2009-04-24T15:30:00.267
Modified: 2025-04-09T00:30:58.490
Link: CVE-2009-1192


No data.