CVE-2009-1338: Medium severity linux kernel vulnerability
Description of problem: Currently "kill <sig> -1" kills processes in all namespaces and breaks the isolation of namespaces. Use "taskpidvnr() > 1" to check since taskpidvnr() returns 0 if process is outside the caller's namespace.
Upstream patch: http://git.kernel.org/linus/d25141a818383b3c3b09f065698c544a7a0ec6e7
Other sources
The killsomethinginfo function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1338?
CVE-2009-1338 has a severity rating that can vary depending on the specific context of its exploitation but is generally considered to be a medium risk due to its potential to break namespace isolation.
How do I fix CVE-2009-1338?
To fix CVE-2009-1338, upgrade to a version of the Linux kernel that includes the upstream patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2009-1338?
CVE-2009-1338 affects multiple versions of the Linux kernel, including 2.2.27, 2.4.36, and all versions prior to 2.6.27.21.
What happens if CVE-2009-1338 is exploited?
If exploited, CVE-2009-1338 may allow an attacker to kill processes across all namespaces, compromising the isolation that namespaces are intended to provide.
Is CVE-2009-1338 still relevant today?
While CVE-2009-1338 is an older vulnerability, systems running the vulnerable Linux kernel versions may still be at risk if not updated.