VULNERABILITY INTELLIGENCE

CVE-2008-2729

CVSS score4.9 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2008-06-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N

Description

arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory locations after an exception during kernel memory copy, which allows local users to obtain sensitive information.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references