CVE-2009-0269: Medium severity Linux Linux kernel vulnerability

Q: What is the severity of CVE-2009-0269?

CVE-2009-0269 is classified as a high severity vulnerability as it can lead to denial of service and potential memory corruption in the Linux kernel.

Q: How can I fix CVE-2009-0269?

To address CVE-2009-0269, it is recommended to upgrade to Linux kernel version 2.6.28.1 or later.

Q: What are the impacted systems for CVE-2009-0269?

CVE-2009-0269 affects various Linux distributions, including specific versions of the Linux kernel, openSUSE, and Debian.

Q: How does CVE-2009-0269 exploit occur?

Exploitation of CVE-2009-0269 occurs through a faulty readlink call that can lead to using a -1 return value as an array index, causing errors.

Q: Are there any workarounds for CVE-2009-0269?

While upgrading the kernel is the primary solution for CVE-2009-0269, ensuring proper system configurations and restricting user access may help mitigate risks.

Published Jan 26, 2009

Updated

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.

Affected Software

119 affected components

Linux Linux kernel=2.6.25.4

Linux Linux kernel=2.6.25.11

Linux Linux kernel=2.6.18-rc3

Linux Linux kernel=2.6.25.9

Linux Linux kernel=2.6.22.15

Linux Linux kernel=2.6.24.7

Linux Linux kernel=2.6.18-rc2

Linux Linux kernel=2.6.23.13

Linux Linux kernel=2.6.24.2

Linux Linux kernel=2.4.36.6

Linux Linux kernel=2.6.18-rc5

Linux Linux kernel=2.6.26.5

Linux Linux kernel<=2.6.28

Linux Linux kernel=2.6.18-rc4

Linux Linux kernel=2.6.22.21

Linux Linux kernel=2.6.25.12

Linux Linux kernel=2.6.25.5

Linux Linux kernel=2.6.23.8

Linux Linux kernel=2.6.25

Linux Linux kernel=2.6.22.12

Linux Linux kernel=2.6.25.8

Linux Linux kernel=2.6.21.6

Linux Linux kernel=2.4.36.2

Linux Linux kernel=2.6.22.1

Linux Linux kernel=2.6.23.16

Linux Linux kernel=2.6.24.1

Linux Linux kernel=2.6.25.6

Linux Linux kernel=2.6.22

Linux Linux kernel=2.6.26

Linux Linux kernel=2.6.26.3

Linux Linux kernel=2.6.20.16

Linux Linux kernel=2.6.25.9

Linux Linux kernel=2.6.27

Linux Linux kernel=2.6.19.4

Linux Linux kernel=2.6.25.13

Linux Linux kernel=2.6.20.21

Linux Linux kernel=2.6.25.7

Linux Linux kernel=2.4.36.1

Linux Linux kernel=2.6.25.3

Linux Linux kernel=2.6.24

Linux Linux kernel=2.6.26.2

Linux Linux kernel=2.6.20.17

Linux Linux kernel=2.6.21.5

Linux Linux kernel=2.6.25.15

Linux Linux kernel=2.6.24_rc4

Linux Linux kernel=2.6.23.15

Linux Linux kernel=2.6.23.10

Linux Linux kernel=2.4.36.4

Linux Linux kernel=2.6.26.1

Linux Linux kernel=2.6.20.20

Linux Linux kernel=2.6.22.18

Linux Linux kernel=2.6.25.8

Linux Linux kernel=2.4.36.3

Linux Linux kernel=2.6.22.20

Linux Linux kernel=2.6.20.18

Linux Linux kernel=2.6.23.9

Linux Linux kernel=2.6.25.2

Linux Linux kernel=2.6.25.1

Linux Linux kernel=2.6.24.4

Linux Linux kernel=2.6.25.16

Linux Linux kernel=2.6.22.9

Linux Linux kernel=2.6.25.17

Linux Linux kernel=2.6.22.13

Linux Linux kernel=2.6.19.7

Linux Linux kernel=2.6.24.5

Linux Linux kernel=2.6.24_rc1

Linux Linux kernel=2.6.20.19

Linux Linux kernel=2.6.22.17

Linux Linux kernel=2.6.25.10

Linux Linux kernel=2.6.22.11

Linux Linux kernel=2.6.23

Linux Linux kernel=2.6.22.10

Linux Linux kernel=2.6.23.17

Linux Linux kernel=2.6.25.1

Linux Linux kernel=2.6.25.4

Linux Linux kernel=2.6.25.3

Linux Linux kernel=2.6.21.7

Linux Linux kernel=2.6.23_rc1

Linux Linux kernel=2.6.22.22

Linux Linux kernel=2.6.18-rc7

Linux Linux kernel=2.6.25.5

Linux Linux kernel=2.6.24.6

Linux Linux kernel=2.6.22_rc7

Linux Linux kernel=2.4.36

Linux Linux kernel=2.6.23.12

Linux Linux kernel=2.6.24_rc5

Linux Linux kernel=2.6.19.6

Linux Linux kernel=2.6.25.11

Linux Linux kernel=2.6.18-rc6

Linux Linux kernel=2.6.22.8

Linux Linux kernel=2.6.19.5

Linux Linux kernel=2.6.18

Linux Linux kernel=2.4.36.5

Linux Linux kernel=2.6.22.2

Linux Linux kernel=2.2.27

Linux Linux kernel=2.6.22.19

Linux Linux kernel=2.6.24.3

Linux Linux kernel=2.6.22_rc1

Linux Linux kernel=2.6.25

Linux Linux kernel=2.6.25.2

Linux Linux kernel=2.6.25.7

Linux Linux kernel=2.6.25.14

Linux Linux kernel=2.6.26.4

Linux Linux kernel=2.6.25.12

Linux Linux kernel=2.6.25.6

Linux Linux kernel=2.6.18-rc1

Linux Linux kernel=2.6.23.11

Linux Linux kernel=2.6.22.14

Linux Linux kernel=2.6.25.10

Linux Linux kernel=2.6

Linux Linux kernel<2.6.28.1

openSUSE openSUSE=10.3

openSUSE openSUSE=11.0

openSUSE openSUSE=11.1

Debian Debian Linux=4.0

Debian Debian Linux=5.0

Canonical Ubuntu Linux=7.10

Canonical Ubuntu Linux=8.04

Canonical Ubuntu Linux=8.10

Remediation

Patch Available

http://www.securityfocus.com/bid/33412

Event History

Jan 26, 2009

CVE Published

via MITRE·03:05 PM

Data Sourced

via MITRE·03:05 PM

Description

Data Sourced

via NVD·03:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0269?

CVE-2009-0269 is classified as a high severity vulnerability as it can lead to denial of service and potential memory corruption in the Linux kernel.

How can I fix CVE-2009-0269?