CVEvulnerability

CVE-2009-2768

7.8 HIGH Published 2009-08-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2009-08-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-476, CWE-824

Description

The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an "uninitialized cred pointer."

Affected configurations

• linux linux kernel (< 2.6.31) • linux linux kernel 2.6.31

Weakness · CWE (2)

CWE-476 NULL Pointer Dereference weakness
CWE-824 Access of Uninitialized Pointer weakness

Referenced by CWE · observed example (1)

CWE-824 Access of Uninitialized Pointer weakness

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666 Broken Link
http://lkml.org/lkml/2009/6/22/91 Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/36278 Broken Link
http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6 Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 Broken Link
http://www.openwall.com/lists/oss-security/2009/08/13/1 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/36037 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/52909 Third Party Advisory, VDB Entry
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666 Broken Link
http://lkml.org/lkml/2009/6/22/91 Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/36278 Broken Link
http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6 Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 Broken Link
http://www.openwall.com/lists/oss-security/2009/08/13/1 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/36037 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/52909 Third Party Advisory, VDB Entry