CVE-2009-2692
- State
- Published
- Severity
- Not scored
- Published
- Aug 14, 2009
- Updated
- Aug 7, 2024
- Reserved
- Aug 5, 2009
Description
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2009:1233vendor-advisory
- 36278third-party-advisory
- DSA-1865vendor-advisory
- RHSA-2009:1223vendor-advisory
- 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernelmailing-list
- http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.5
- 37298third-party-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0121
- 36430third-party-advisory
- 37471third-party-advisory
- RHSA-2009:1222vendor-advisory
- 20090813 Linux NULL pointer dereference due to incorrect proto_ops initializationsmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=516949
- https://issues.rpath.com/browse/RPL-3103
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- 19933exploit
- ADV-2009-2272vdb-entry
- SUSE-SR:2009:015vendor-advisory
- 20090813 Linux NULL pointer dereference due to incorrect proto_ops initializationsmailing-list
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e694958388c50148389b0e9b9e9e8945cf0f1b98
- 36289third-party-advisory
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party componentsmailing-list
- 36327third-party-advisory
- http://support.avaya.com/css/P8/documents/100067254
- http://grsecurity.net/~spender/wunderbar_emporium.tgz
- oval:org.mitre.oval:def:11591vdb-entrysignature
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git%3Ba=commit%3Bh=c18d0fe535a73b219f960d1af3d0c264555a12e3
- oval:org.mitre.oval:def:11526vdb-entrysignature
- MDVSA-2009:233vendor-advisory
- 9477exploit
- http://blog.cr0.org/2009/08/linux-null-pointer-dereference-due-to.html
- http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6
- oval:org.mitre.oval:def:8657vdb-entrysignature
- [oss-security] 20090814 CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privescmailing-list
- 36038vdb-entry
- 20090818 rPSA-2009-0121-1 kernel open-vm-toolsmailing-list
- http://zenthought.org/content/file/android-root-2009-08-16-source
- ADV-2009-3316vdb-entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.