CVE-2009-2692

Advisory lineage Upstream: 0 Downstream: 9
Modified
Published: 14 Aug 2009, 15:00
Last modified:07 Aug 2024, 05:59

Vulnerability Summary

Overall Risk (default)
medium
45/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
17.56% MEDIUM
18% probability +2.95%
KEV
Not listed
Ransomware
No reports
Public exploits
12 found
Dark Web
Not detected

Timeline

14 Aug 2009, 15:00
Published
Vulnerability first disclosed
07 Aug 2024, 05:59
Last Modified
Vulnerability information updated

Description

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 17.56%• Percentile: 95%

Techniques & Countermeasures

  • CWE-908•Use of Uninitialized Resource

    The product uses or accesses a resource that has not been initialized.

Affected Systems

  • debian•debian_linux

    4.0

  • linux•linux_kernel

    ≥ 2.4.4, < 2.4.37.5 | ≥ 2.6.0, < 2.6.30.5

  • redhat•enterprise_linux_desktop

    4.0 | 5.0

  • redhat•enterprise_linux_eus

    4.8 | 5.3

  • redhat•enterprise_linux_server

    4.0 | 5.0

  • redhat•enterprise_linux_server_aus

    5.3

  • redhat•enterprise_linux_workstation

    4.0 | 5.0

  • suse•linux_enterprise_real_time

    10

References (39)