CVE-2009-2584
- State
- Published
- Severity
- Not scored
- Published
- Jul 23, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jul 23, 2009
Description
Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [linux-kernel] 20090720 Re: [PATCH] sgi-gru: Fix kernel stack buffer overrunmailing-list
- USN-852-1vendor-advisory
- [linux-kernel] 20090721 [PATCH] sgi-gru: Fix kernel stack buffer overrunmailing-list
- http://grsecurity.net/~spender/exploit_demo.c
- kernel-sgigru-bo(51887)vdb-entry
- 35753vdb-entry
- 37105third-party-advisory
- http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.