CVE-2009-3001

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.

• CWE-200

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc
• http://jon.oberheide.org/files/llc-getsockname-leak.cBroken Link
• http://secunia.com/advisories/37105Third Party Advisory
• http://www.exploit-db.com/exploits/9513Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2009/08/26/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/36126Exploit, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-852-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=519305Exploit, Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52732Third Party Advisory, VDB Entry
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc
• http://jon.oberheide.org/files/llc-getsockname-leak.cBroken Link
• http://secunia.com/advisories/37105Third Party Advisory
• http://www.exploit-db.com/exploits/9513Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2009/08/26/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/36126Exploit, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-852-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=519305Exploit, Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52732Third Party Advisory, VDB Entry

Published

Aug 28, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2995Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x befo…
• CVE-2009-2996Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7,…
• CVE-2009-2997Heap-based buffer overflow in Adobe Reader and Acrobat 7.x b…
• CVE-2009-2998Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7,…
• CVE-2009-2999The com.android.phone process in Android 1.5 CRBxx allows re…
• CVE-2009-3000The sockfs module in the kernel in Sun Solaris 10 and OpenSo…
• CVE-2009-3002The Linux kernel before 2.6.31-rc7 does not initialize certa…
• CVE-2009-3003Microsoft Internet Explorer 6 through 8 allows remote attack…
• CVE-2009-3004Avant Browser 11.7 Builds 35 and 36 allows remote attackers …
• CVE-2009-3005Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof t…
• CVE-2009-3006Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to …
• CVE-2009-3007Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1,…