CVE-2009-2847: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.

Affected products

• Linux Kernel: version 2.6.24.7 only; version 2.6.25.15 only
• Linux Linux Kernel: up to and including 2.6.16.31; version 2.6 only; version 2.6.0 only; version 2.6.1 only; version 2.6.10 only; version 2.6.11 only; …

Published 2009-08-18. Last modified 2026-06-16.