CVE-2009-1895: Null Pointer Dereference
The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmapminaddr protection mechanism, or (3) defeat address space layout randomization (ASLR).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1895?
CVE-2009-1895 is classified as a moderate severity vulnerability.
How do I fix CVE-2009-1895?
To fix CVE-2009-1895, update the Linux kernel to version 2.6.31 or newer.
Which systems are affected by CVE-2009-1895?
CVE-2009-1895 affects Linux kernel versions prior to 2.6.31, as well as specific versions of Debian and Ubuntu.
What type of vulnerability is CVE-2009-1895?
CVE-2009-1895 is a local privilege escalation vulnerability in the Linux kernel's personality subsystem.
What happens if CVE-2009-1895 is exploited?
Exploitation of CVE-2009-1895 can allow local users to gain elevated privileges.