CVEvulnerability
CVE-2009-0835
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
Affected configurations
• linux linux kernel 2.6.25
• linux linux kernel 2.6.25.1
• linux linux kernel 2.6.25.2
• linux linux kernel 2.6.25.3
• linux linux kernel 2.6.25.4
• linux linux kernel 2.6.25.5
• linux linux kernel 2.6.25.6
• linux linux kernel 2.6.25.7
• linux linux kernel 2.6.25.8
• linux linux kernel 2.6.25.9
• linux linux kernel 2.6.25.10
• linux linux kernel 2.6.25.11
• linux linux kernel 2.6.25.12
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html lists.opensuse.org
- http://lkml.org/lkml/2009/2/28/23 lkml.org
- http://marc.info/?l=linux-kernel&m=123579056530191&w=2 marc.info
- http://marc.info/?l=linux-kernel&m=123579069630311&w=2 Exploit
- http://marc.info/?l=oss-security&m=123597627132485&w=2 marc.info
- http://scary.beasts.org/security/CESA-2009-001.html Exploit
- http://scary.beasts.org/security/CESA-2009-004.html scary.beasts.org
- http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html scarybeastsecurity.blogspot.com
- http://secunia.com/advisories/34084 Vendor Advisory
- http://secunia.com/advisories/34786 secunia.com
- http://secunia.com/advisories/34917 Vendor Advisory
- http://secunia.com/advisories/35121 Vendor Advisory
- http://secunia.com/advisories/35185 Vendor Advisory
- http://secunia.com/advisories/35390 Vendor Advisory
- http://secunia.com/advisories/35394 Vendor Advisory
- http://www.debian.org/security/2009/dsa-1800 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2009-0451.html www.redhat.com
- http://www.securityfocus.com/bid/33948 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-751-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=487255 Exploit
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html lists.opensuse.org
- http://lkml.org/lkml/2009/2/28/23 lkml.org
- http://marc.info/?l=linux-kernel&m=123579056530191&w=2 marc.info
- http://marc.info/?l=linux-kernel&m=123579069630311&w=2 Exploit
- http://marc.info/?l=oss-security&m=123597627132485&w=2 marc.info
- http://scary.beasts.org/security/CESA-2009-001.html Exploit
- http://scary.beasts.org/security/CESA-2009-004.html scary.beasts.org
- http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html scarybeastsecurity.blogspot.com
- http://secunia.com/advisories/34084 Vendor Advisory
- http://secunia.com/advisories/34786 secunia.com
- http://secunia.com/advisories/34917 Vendor Advisory
- http://secunia.com/advisories/35121 Vendor Advisory
- http://secunia.com/advisories/35185 Vendor Advisory
- http://secunia.com/advisories/35390 Vendor Advisory
- http://secunia.com/advisories/35394 Vendor Advisory
- http://www.debian.org/security/2009/dsa-1800 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:118 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2009-0451.html www.redhat.com
- http://www.securityfocus.com/bid/33948 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-751-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=487255 Exploit