CVE-2009-1192: The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in t...

Security readout for executives and security teams

This is a local information disclosure flaw in older Linux kernels. Memory pages allocated by the AGP graphics subsystem were not cleared before becoming accessible to a user-space process, so a local user could read leftover sensitive data from memory. The supplied sources do not describe remote exploitation. Exposure is most relevant on legacy Linux systems or appliances running affected pre-2.6.30-rc3 kernels, especially where untrusted local users or hosted workloads can execute code. The source bundle lists multiple vendor advisories, but exact affected package versions are not included here. Treat this as a legacy local data exposure issue. It is unlikely to drive emergency response by itself, but it matters for old multi-user servers, virtualization hosts, and unsupported appliances where local tenants or users could access residual memory. Mitigation focus: Upgrade affected kernels using the relevant vendor security advisory.; Confirm the running kernel includes the upstream fix present by 2.6.30-rc3.; Reduce untrusted local user access on legacy systems until patched..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.