CVEvulnerability

CVE-2009-1337

4.4 MEDIUM Published 2009-04-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.

Affected configurations

• linux linux kernel (<= 2.6.29) • linux linux kernel 2.2.27 • linux linux kernel 2.4.36 • linux linux kernel 2.4.36.1 • linux linux kernel 2.4.36.2 • linux linux kernel 2.4.36.3 • linux linux kernel 2.4.36.4 • linux linux kernel 2.4.36.5 • linux linux kernel 2.4.36.6 • linux linux kernel 2.6 • linux linux kernel 2.6.0 • linux linux kernel 2.6.1 • linux linux kernel 2.6.2 • linux linux kernel 2.6.3 • linux linux kernel 2.6.4 • linux linux kernel 2.6.5 • linux linux kernel 2.6.6 • linux linux kernel 2.6.7 • linux linux kernel 2.6.8 • linux linux kernel 2.6.8.1 • linux linux kernel 2.6.9 • linux linux kernel 2.6.10 • linux linux kernel 2.6.11 • linux linux kernel 2.6.11.1 • linux linux kernel 2.6.11.2 • linux linux kernel 2.6.11.3 • linux linux kernel 2.6.11.4 • linux linux kernel 2.6.11.5 • linux linux kernel 2.6.11.6 • linux linux kernel 2.6.11.7 • linux linux kernel 2.6.11.8 • linux linux kernel 2.6.11.9 • linux linux kernel 2.6.11.10 • linux linux kernel 2.6.11.11 • linux linux kernel 2.6.11.12 • linux linux kernel 2.6.12 • linux linux kernel 2.6.12.1 • linux linux kernel 2.6.12.2 • linux linux kernel 2.6.12.3 • linux linux kernel 2.6.12.4 • linux linux kernel 2.6.12.5 • linux linux kernel 2.6.12.6 • linux linux kernel 2.6.13 • linux linux kernel 2.6.13.1 • linux linux kernel 2.6.13.2 • linux linux kernel 2.6.13.3 • linux linux kernel 2.6.13.4 • linux linux kernel 2.6.13.5 • linux linux kernel 2.6.14 • linux linux kernel 2.6.14.1 • linux linux kernel 2.6.14.2 • linux linux kernel 2.6.14.3 • linux linux kernel 2.6.14.4 • linux linux kernel 2.6.14.5 • linux linux kernel 2.6.14.6 • linux linux kernel 2.6.14.7 • linux linux kernel 2.6.15 • linux linux kernel 2.6.15.1 • linux linux kernel 2.6.15.2 • linux linux kernel 2.6.15.3 … and 234 more

Related

Weakness · not in database (1)

References