cve.bz

CWE-909: Missing Initialization of Resource, page 3

Filter

The product does not initialize a critical resource.

What the weakness is: CWE-909 at MITRE. All weaknesses

Ask an AI about CWE-909

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-909: Missing Initialization of Resource and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/909.html and https://cve.bz/cve/cwe/909?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. –CVE-2010-4078EPSS 0.4%

    The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack …

  2. –CVE-2010-3297EPSS 0.4%

    The eql_g_master_cfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory…

  3. –CVE-2009-3228EPSS 0.4%

    The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow l…

  4. 7.8CVE-2005-1036EPSS 0.4%

    FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive…