kernel: netlink: fix numerous padding memleaks
Published Oct 19, 2009
4.9
MEDIUMCVSS 2.0
EPSS 0.38%
Description
The netlink subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.13-rc1 does not initialize certain padding fields in structures, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors, related to the (1) tc_fill_qdisc, (2) tcf_fill_node, (3) neightbl_fill_info, (4) neightbl_fill_param_info, (5) neigh_fill_info, (6) rtnetlink_fill_ifinfo, (7) rtnetlink_fill_iwinfo, (8) vif_delete, (9) ipmr_destroy_unres, (10) ipmr_cache_alloc_unres, (11) ipmr_cache_resolve, (12) inet6_fill_ifinfo, (13) tca_get_fill, (14) tca_action_flush, (15) tcf_add_notify, (16) tc_dump_action, (17) cbq_dump_police, (18) __nlmsg_put, (19) __rta_fill, (20) __rta_reserve, (21) inet6_fill_prefix, (22) rsvp_dump, and (23) cbq_dump_ovl functions.
Affected products
No data.
Configuration 1
- 2.4.1
- 2.4.2
- 2.4.3
- 2.4.4
- 2.4.5
- 2.4.6
- 2.4.7
- 2.4.8
- 2.4.9
- 2.4.10
- 2.4.11
- 2.4.12
- 2.4.13
- 2.4.14
- 2.4.15
- 2.4.16
- 2.4.17
- 2.4.18
- 2.4.19
- 2.4.20
- 2.4.21
- 2.4.22
- 2.4.23
- 2.4.24
- 2.4.25
- 2.4.26
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.28
- 2.4.29
- 2.4.30
- 2.4.30
- 2.4.30
- 2.4.31
- 2.4.32
- 2.4.33
- 2.4.33.1
- 2.4.33.2
- 2.4.33.3
- 2.4.33.4
- 2.4.33.5
- 2.4.33.7
- 2.4.34
- 2.4.34.1
- 2.4.34.2
- 2.4.34.3
- 2.4.34.4
- 2.4.34.5
- 2.4.34.6
- 2.4.35.1
- 2.4.35.2
- 2.4.35.3
- 2.4.35.4
- 2.4.35.5
- 2.4.36
- 2.4.36.1
- 2.4.36.2
- 2.4.36.3
- 2.4.36.4
- 2.4.36.5
- 2.4.36.6
- 2.4.36.7
- 2.4.36.8
- 2.4.36.9
- 2.4.37
- 2.4.37.1
- 2.4.37.2
- 2.4.37.3
- 2.4.37.4
- 2.4.37.5
Configuration 2
- 2.6.0
- 2.6.1
- 2.6.10
- 2.6.11
- 2.6.11.1
- 2.6.11.2
- 2.6.11.3
- 2.6.11.4
- 2.6.11.5
- 2.6.11.6
- 2.6.11.7
- 2.6.11.8
- 2.6.11.9
- 2.6.11.10
- 2.6.11.11
- 2.6.11.12
- 2.6.12
- 2.6.12.1
- 2.6.12.2
- 2.6.12.3
- 2.6.12.4
- 2.6.12.5
- 2.6.12.6
No data.
Red Hat Enterprise Linux 4
kernel-0:2.6.9-89.0.15.EL
Fixed · RHSA-2009:1522
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | kernel-0:2.6.9-89.0.15.EL | Fixed | RHSA-2009:1522 |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue has been rated as having moderate security impact. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, and Red Hat Enterprise MRG. It affects Red Hat Enterprise Linux 3, and 4. This issue is not planned to be fixed in Red Hat Enterprise Linux 3, due to this product being in Production 3 of its maintenance life-cycle, where only qualified security errata of important and critical impact are addressed. For further information about Errata Support Policy, visit: https://access.redhat.com/support/policy/updates/errata/
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:L/AC:L/Au:N/C:C/I:N/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (10 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.38% (0.00378) | 29.38th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.38% (0.00381) | 29.72th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.07% (0.00073) | 19.65th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00044) | 11.89th | v3 (v2023.03.01) |
| Jul 2, 2024 | 0.04% (0.00044) | 10.25th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00044) | 8.24th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.55% (0.01547) | 74.98th | v2 (v2022.01.01) |
| Feb 23, 2023 | 1.55% (0.01547) | 74.94th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.55% (0.01547) | 72.92th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.55% (0.01547) | 51.82th | v2 (v2022.01.01) |
References (23)
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=0f3f2328f63c521fe4b435f148687452f98b2349 x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=30e744716c4a6cc4e8ecaaddf68f20057c03dc8d x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=3408cce0c2f380884070896420ca566704452fb5 x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a47077a0b5aa2649751c46e7a27884e6686ccbf x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9ef1d4c7c7aca1cd436612b6ca785b726ffb8ed8 x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b3563c4fbff906991a1b4ef4609f99cca2a0de6a x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=git-commits-head&m=112002138324380 mailing-listx_refsource_MLISTPatch
- http://secunia.com/advisories/37084 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/37909 third-party-advisoryx_refsource_SECUNIA
- http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.6 x_refsource_CONFIRMVendor Advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.13/ChangeLog-2.6.13-rc1 x_refsource_CONFIRMPatchVendor Advisory
- http://www.openwall.com/lists/oss-security/2009/09/05/2 mailing-listx_refsource_MLISTPatch
- http://www.openwall.com/lists/oss-security/2009/09/06/2 mailing-listx_refsource_MLISTPatch
- http://www.openwall.com/lists/oss-security/2009/09/07/2 mailing-listx_refsource_MLISTPatch
- http://www.openwall.com/lists/oss-security/2009/09/17/1 mailing-listx_refsource_MLISTPatch
- http://www.openwall.com/lists/oss-security/2009/09/17/9 mailing-listx_refsource_MLISTPatch
- http://www.redhat.com/support/errata/RHSA-2009-1522.html vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2005-4881 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=521601 x_refsource_CONFIRMIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2005-4881
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11744 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2005-4881
Change history (0)
No recorded changes yet.