Skip to content

01 Record

CVE-2009-2910

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

02 Description

arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.41% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 35.4% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2009-10-20 17:00Z17 YR AGO

Last updated

2024-08-07 06:07Z2 YR AGO

Reserved

2009-08-20

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-200Exposure of Sensitive Information to an Unauthorized ActorClass

Data version

5.1

Document digest

3f38ce4353b15509de20405714cd19603000f3f1bb158c4aa8947e0749067970

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

fedoraprojectfedoraNot specified—

linuxlinux_kernelNot specified—

opensuseopensuseNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatenterprise_linux_eusNot specified—

redhatenterprise_linux_serverNot specified—

redhatenterprise_linux_workstationNot specified—

redhatenterprise_mrgNot specified—

redhatvirtualizationNot specified—

suselinux_enterprise_debuginfoNot specified—

suselinux_enterprise_desktopNot specified—

suselinux_enterprise_serverNot specified—

suselinux_enterprise_software_development_kitNot specified—

06 References

www.kernel.orghttp://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4x_refsource_CONFIRM
www.redhat.comRHSA-2009:1671http://www.redhat.com/support/errata/RHSA-2009-1671.htmlvendor-advisoryx_refsource_REDHAT
git.kernel.orghttp://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6x_refsource_CONFIRM
rhn.redhat.comRHSA-2009:1540https://rhn.redhat.com/errata/RHSA-2009-1540.htmlvendor-advisoryx_refsource_REDHAT
www.ubuntu.comUSN-864-1http://www.ubuntu.com/usn/usn-864-1vendor-advisoryx_refsource_UBUNTU
secunia.com36927http://secunia.com/advisories/36927third-party-advisoryx_refsource_SECUNIA
oval.cisecurity.orgoval:org.mitre.oval:def:7359https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359vdb-entrysignaturex_refsource_OVAL
secunia.com37351http://secunia.com/advisories/37351third-party-advisoryx_refsource_SECUNIA
secunia.com37075http://secunia.com/advisories/37075third-party-advisoryx_refsource_SECUNIA
support.avaya.comhttp://support.avaya.com/css/P8/documents/100073666x_refsource_CONFIRM
lists.opensuse.orgSUSE-SA:2009:056http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SA:2010:012http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.htmlvendor-advisoryx_refsource_SUSE
www.openwall.com[oss-security] 20091001 Re: CVE Request (kernel)http://www.openwall.com/lists/oss-security/2009/10/02/1mailing-listx_refsource_MLIST
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=526788x_refsource_CONFIRM
oval.cisecurity.orgoval:org.mitre.oval:def:10823https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823vdb-entrysignaturex_refsource_OVAL
www.securityfocus.com36576http://www.securityfocus.com/bid/36576vdb-entryx_refsource_BID
marc.info[oss-security] 20091002 Re: CVE Request (kernel)http://marc.info/?l=oss-security&m=125444390112831&w=2mailing-listx_refsource_MLIST
marc.info[oss-security] 20091009 Re: CVE Request (kernel)http://marc.info/?l=oss-security&m=125511635004768&w=2mailing-listx_refsource_MLIST
marc.info[oss-security] 20091001 CVE Request (kernel)http://marc.info/?l=oss-security&m=125442304214452&w=2mailing-listx_refsource_MLIST
www.redhat.comFEDORA-2009-10525https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.htmlvendor-advisoryx_refsource_FEDORA
rhn.redhat.comRHSA-2010:0095https://rhn.redhat.com/errata/RHSA-2010-0095.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2010:0046https://rhn.redhat.com/errata/RHSA-2010-0046.htmlvendor-advisoryx_refsource_REDHAT
lkml.org[linux-kernel] 20091001 [tip:x86/urgent] x86: Don't leak 64-bit kernel register values to 32-bit processeshttp://lkml.org/lkml/2009/10/1/164mailing-listx_refsource_MLIST
lists.opensuse.orgSUSE-SA:2009:054http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.htmlvendor-advisoryx_refsource_SUSE