CVE-2009-3547: canonical ubuntu_linux
Vulnerability summary
CVE-2009-3547 is a high (CVSS 7.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.89% chance of exploitation in the next 30 days, higher than 92% of scored vulnerabilities. 7 public exploits are recorded.
Weaponized exploit (exploit-database, 12-11-2009)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8Timeline
- 04-11-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.89%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.89% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
7 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (lkml.org)
Maturity: unknown
Linux Kernel 2.4.1 < 2.4.37 / 2.6.1 < 2.6.32-rc5 - 'pipe.c' Local Privilege Escalation (3)
Maturity: weaponized
Show all 7 exploits
Linux Kernel 2.6.0 < 2.6.31 - 'pipe.c' Local Privilege Escalation (1)
Maturity: weaponized
Linux Kernel 2.6.10 < 2.6.31.5 - 'pipe.c' Local Privilege Escalation
Maturity: poc
Linux Kernel 2.6.32 - 'pipe.c' Local Privilege Escalation (4)
Maturity: weaponized
Linux Kernel 2.6.x - 'pipe.c' Local Privilege Escalation (2)
Maturity: weaponized
Weaknesses
CWE · root cause- CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
- CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.
- CWE-672Operation on a Resource after Expiration or ReleaseThe product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat17 products
- enterprise_linux_desktop3.0 | 4.0 | 5.0
- enterprise_linux_eus4.8 | 5.4
- enterprise_linux_server3.0 | 4.0 | 5.0
- enterprise_linux_workstation3.0 | 4.0 | 5.0
- mrg_realtime1.0
Suse2 products
Canonical1 product
- ubuntu_linuxEOL6.06 | 8.04 | 8.10 | 9.04 | 9.10
Fedoraproject1 product
- fedoraEOL10
Linux1 product
- linux_kernel≤ 2.6.31.14 | 2.6.32 | 2.6.32:rc1 | 2.6.32:rc2 | 2.6.32:rc3 | 2.6.32:rc4 | 2.6.32:rc5
Novell1 product
Opensuse1 product
- opensuseEOL11.0 | 11.2
8 vendors · 26 products
References
38 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
- www.securityfocus.com/archive/1/512019/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
- lists.vmware.com/pipermail/security-announce/2010/000082.htmlMailing ListX Refsource MLISTThird Party Advisory
Show all 38 references
- lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2009:329Vendor AdvisoryX Refsource MANDRIVABroken Link
- lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.htmlVendor AdvisoryX Refsource SUSEBroken LinkMailing ListThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=530490X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
- www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.htmlVendor AdvisoryX Refsource FEDORAMailing List
