Description
The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a user-space process, which allows local users to obtain sensitive information by reading these pages.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 5.0 | linux-2.6 | 2.6.26-15lenny2 | DSA-1800-1 |
| Debian 5.0 | user-mode-linux | 2.6.26-1um-2+15lenny2 | DSA-1800-1 |
| Debian 4.0 | fai-kernels | 1.17+etch.24etch2 | DSA-1794-1 |
| Debian 4.0 | linux-2.6 | 2.6.18.dfsg.1-24etch2 | DSA-1794-1 |
| Debian 4.0 | linux-2.6.24 | 2.6.24-6~etchnhalf.8etch1 | DSA-1787-1 |
| Debian 4.0 | user-mode-linux | 2.6.18-1um-2etch.24etch2 | DSA-1794-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | kernel +12 | 2.6.18-128.1.14.el5 | RHSA-2009:1106 |
| RHEL 4 | kernel +10 | 2.6.9-89.0.3.EL | RHSA-2009:1132 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | kernel-rt +9 | 2.6.24.7-117.el5rt | RHSA-2009:1081 |
Advisories 6
- RHSA-2009:1132 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2009:1106 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2009:1081 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-1787-1 linux-2.6.24 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1794-1 linux-2.6 - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1800-1 linux-2.6 user-mode-linux - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDVSA-2009:135 vendor-advisory
- oval:org.mitre.oval:def:10567 vdb-entry signature
- 37471 third-party-advisory
- SUSE-SA:2009:032 vendor-advisory
- 35656 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- DSA-1794 vendor-advisory
- 37351 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=497020
- 20090516 rPSA-2009-0084-1 kernel mailing-list
- SUSE-SA:2009:056 vendor-advisory
- [oss-security] 20090422 CVE-2009-1192 kernel: agp: zero pages before sending to userspace mailing-list
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc3
- 35011 third-party-advisory
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- 34673 vdb-entry
- 35120 third-party-advisory
- USN-793-1 vendor-advisory
- RHSA-2009:1081 vendor-advisory
- 34981 third-party-advisory
- DSA-1800 vendor-advisory
- 35343 third-party-advisory
- oval:org.mitre.oval:def:8003 vdb-entry signature
- 35387 third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=59de2bebabc5027f93df999d59cc65df591c3e6e
- DSA-1787 vendor-advisory
- MDVSA-2009:119 vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2009-0084
- 35121 third-party-advisory
- SUSE-SA:2009:054 vendor-advisory
- ADV-2009-3316 vdb-entry