CVE-2008-3901
Publication date 3 September 2008
Last updated 24 July 2024
Ubuntu priority
Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.
Status
Package | Ubuntu Release | Status |
---|---|---|
linux | ||
linux-source-2.6.15 | ||
linux-source-2.6.20 | ||
linux-source-2.6.22 | ||
Notes
jdstrand
requires root access to the machine which gives access to do anything anyway (unless restricting root access via SELinux, which Ubuntu does not)