CVEvulnerability

CVE-2009-3547

7.0 HIGH Published 2009-11-04 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2009-11-04
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-362, CWE-476, CWE-672

Description

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.

Affected configurations

• linux linux kernel (<= 2.6.31.14) • linux linux kernel 2.6.32 • novell linux desktop 9 • opensuse opensuse 11.0 • opensuse opensuse 11.2 • suse suse linux enterprise desktop 10 • suse suse linux enterprise server 10 • canonical ubuntu linux 6.06 • canonical ubuntu linux 8.04 • canonical ubuntu linux 8.10 • canonical ubuntu linux 9.04 • canonical ubuntu linux 9.10 • fedoraproject fedora 10 • vmware vma 4.0 • vmware esx 4.0 • redhat mrg realtime 1.0 • redhat enterprise linux desktop 3.0 • redhat enterprise linux desktop 4.0 • redhat enterprise linux desktop 5.0 • redhat enterprise linux eus 4.8 • redhat enterprise linux eus 5.4 • redhat enterprise linux server 3.0 • redhat enterprise linux server 4.0 • redhat enterprise linux server 5.0 • redhat enterprise linux workstation 3.0 • redhat enterprise linux workstation 4.0 • redhat enterprise linux workstation 5.0

Weakness · CWE (3)

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
CWE-476 NULL Pointer Dereference weakness
CWE-672 Operation on a Resource after Expiration or Release weakness

Referenced by CWE · observed example (4)

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
CWE-476 NULL Pointer Dereference weakness
CWE-672 Operation on a Resource after Expiration or Release weakness
CWE-826 Premature Release of Resource During Expected Lifetime weakness

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c Broken Link
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html Broken Link, Mailing List, Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000082.html Mailing List, Third Party Advisory
http://lkml.org/lkml/2009/10/14/184 Exploit, Mailing List
http://lkml.org/lkml/2009/10/21/42 Mailing List, Patch
http://marc.info/?l=oss-security&m=125724568017045&w=2 Mailing List, Third Party Advisory
http://secunia.com/advisories/37351 Broken Link
http://secunia.com/advisories/38017 Broken Link
http://secunia.com/advisories/38794 Broken Link
http://secunia.com/advisories/38834 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6 Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 Broken Link
http://www.redhat.com/support/errata/RHSA-2009-1672.html Broken Link
http://www.securityfocus.com/archive/1/512019/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/36901 Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-864-1 Third Party Advisory
http://www.vupen.com/english/advisories/2010/0528 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=530490 Issue Tracking, Patch, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513 Broken Link, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608 Broken Link, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327 Broken Link, Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1540.html Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1541.html Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1548.html Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1550.html Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html Mailing List
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c Broken Link
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html Broken Link, Mailing List, Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000082.html Mailing List, Third Party Advisory
http://lkml.org/lkml/2009/10/14/184 Exploit, Mailing List
http://lkml.org/lkml/2009/10/21/42 Mailing List, Patch
http://marc.info/?l=oss-security&m=125724568017045&w=2 Mailing List, Third Party Advisory
http://secunia.com/advisories/37351 Broken Link
http://secunia.com/advisories/38017 Broken Link
http://secunia.com/advisories/38794 Broken Link
http://secunia.com/advisories/38834 Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6 Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 Broken Link
http://www.redhat.com/support/errata/RHSA-2009-1672.html Broken Link
http://www.securityfocus.com/archive/1/512019/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/36901 Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-864-1 Third Party Advisory
http://www.vupen.com/english/advisories/2010/0528 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=530490 Issue Tracking, Patch, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513 Broken Link, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608 Broken Link, Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327 Broken Link, Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1540.html Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1541.html Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1548.html Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2009-1550.html Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html Mailing List