CVE-2009-2692: Buffer Overflow

Q: What is the severity of CVE-2009-2692?

CVE-2009-2692 is considered to be a high severity vulnerability due to its potential for local privilege escalation.

Q: How do I fix CVE-2009-2692?

To fix CVE-2009-2692, update your kernel to the recommended versions, such as 0:2.6.24.7-132.el5 or 0:2.6.18-128.7.1.el5.

Q: What are the symptoms of CVE-2009-2692 exploitation?

Exploitation of CVE-2009-2692 may lead to unexpected kernel crashes or system instability due to a NULL pointer dereference.

Q: Which systems are affected by CVE-2009-2692?

CVE-2009-2692 affects various Linux kernel versions, particularly those before version 2.6.30.5.

Q: Can CVE-2009-2692 be exploited without authentication?

Yes, CVE-2009-2692 can be exploited by a local user without requiring authentication, leading to potential privilege escalation.

Published Aug 12, 2009

Updated

Description of problem: Reported by Tavis Ormandy and Julien Tinnes. The SOCKOPSWRAP macro from include/linux/net.h doesn't initialise the sendpage operation in the protoops structure correctly. Leading to a kernel NULL pointer dereference, and thus a local privilege escalation.

Acknowledgements:

Red Hat would like to thank Tavis Ormandy and Julien Tinnes of the Google Security Team for responsibly reporting this flaw.

Other sources

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in protoops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (socksendpage function) on a PFPPPOX socket.

— Red Hat

Affected Software

176 affected componentsFixes available

redhat/kernel-rt<0:2.6.24.7-132.el5

0:2.6.24.7-132.el5

redhat/kernel<0:2.6.18-128.7.1.el5

0:2.6.18-128.7.1.el5

redhat/kernel<0:2.6.18-92.1.28.el5

0:2.6.18-92.1.28.el5

Linux Linux kernel=2.4.19

Linux Linux kernel=2.4.15

Linux Linux kernel=2.4.30-rc3

Linux Linux kernel=2.4.27

Linux Linux kernel=2.6.11

Linux Linux kernel=2.6.16.16

Linux Linux kernel=2.6.11.2

Linux Linux kernel=2.6.15.3

Linux Linux kernel=2.4.11

Linux Linux kernel=2.6.11.10

Linux Linux kernel=2.6.1

Linux Linux kernel=2.4.32

Linux Linux kernel=2.6.14.7

Linux Linux kernel=2.4.23

Linux Linux kernel=2.6.13

Linux Linux kernel=2.6.13.3

Linux Linux kernel=2.6.11.8

Linux Linux kernel=2.4.36.6

Linux Linux kernel=2.4.26

Linux Linux kernel=2.4.18

Linux Linux kernel=2.4.27

Linux Linux kernel=2.6.30-rc2

Linux Linux kernel=2.6.14.4

Linux Linux kernel=2.6.14

Linux Linux kernel=2.4.18

Linux Linux kernel=2.6.16.18

Linux Linux kernel=2.6.10

Linux Linux kernel=2.4.12

Linux Linux kernel=2.6.14.3

Linux Linux kernel=2.6.30-rc3

Linux Linux kernel=2.4.13

Linux Linux kernel=2.6.11.6

Linux Linux kernel=2.6.11.11

Linux Linux kernel=2.6.16.13

Linux Linux kernel=2.4.36.2

Linux Linux kernel=2.4.17

Linux Linux kernel=2.6.16.15

Linux Linux kernel=2.4.33.2

Linux Linux kernel=2.6.15.6

Linux Linux kernel=2.4.19

Linux Linux kernel=2.6.15.1

Linux Linux kernel=2.6.11.5

Linux Linux kernel=2.4.21

Linux Linux kernel=2.6.16.1

Linux Linux kernel=2.4.23

Linux Linux kernel=2.6.14.5

Linux Linux kernel=2.6.13.2

Linux Linux kernel=2.4.36.1

Linux Linux kernel=2.6.13.5

Linux Linux kernel=2.4.7

Linux Linux kernel=2.6.16.11

Linux Linux kernel=2.4.25

Linux Linux kernel=2.6.16.14

Linux Linux kernel=2.6.16.25

Linux Linux kernel=2.4.31--pre1

Linux Linux kernel=2.6.16.21

Linux Linux kernel=2.6.16.28

Linux Linux kernel=2.6.14.1

Linux Linux kernel=2.4.9

Linux Linux kernel=2.6.16.23

Linux Linux kernel=2.6.12.5

Linux Linux kernel=2.6.15.7

Linux Linux kernel=2.4.18

Linux Linux kernel=2.4.29--rc2

Linux Linux kernel=2.4.21

Linux Linux kernel=2.4.36.4

Linux Linux kernel=2.4.34

Linux Linux kernel=2.6.14.6

Linux Linux kernel=2.6.12.1

Linux Linux kernel=2.6.11.9

Linux Linux kernel=2.4.19

Linux Linux kernel=2.4.30

Linux Linux kernel=2.4.28

Linux Linux kernel=2.4.19

Linux Linux kernel=2.4.35.3

Linux Linux kernel=2.4.32--pre2

Linux Linux kernel=2.6.0

Linux Linux kernel=2.4.21

Linux Linux kernel=2.4.36.3

Linux Linux kernel=2.6.13.4

Linux Linux kernel=2.4.27

Linux Linux kernel=2.4.24

Linux Linux kernel=2.4.10

Linux Linux kernel=2.6.12.2

Linux Linux kernel=2.4.27

Linux Linux kernel=2.6.30-rc5

Linux Linux kernel=2.6.16.26

Linux Linux kernel=2.4.18

Linux Linux kernel=2.4.30-rc2

Linux Linux kernel=2.4.33

Linux Linux kernel=2.4.16

Linux Linux kernel=2.4.8

Linux Linux kernel=2.4.19

Linux Linux kernel=2.4.14

Linux Linux kernel=2.4.33.7

Linux Linux kernel=2.6.16

Linux Linux kernel=2.6.30.4

Linux Linux kernel=2.6.15.2

Linux Linux kernel=2.6.16.22

Linux Linux kernel=2.4.18

Linux Linux kernel=2.4.33.3

Linux Linux kernel=2.4.18

Linux Linux kernel=2.4.29--rc1

Linux Linux kernel=2.6.16.10

Linux Linux kernel=2.6.12.4

Linux Linux kernel=2.6.11.3

Linux Linux kernel=2.6.16.24

Linux Linux kernel=2.4.23

Linux Kernel=2.6.24.7

Linux Linux kernel=2.6.12.3

Linux Linux kernel=2.4.21

Linux Linux kernel=2.6.30.2

Linux Linux kernel=2.4.33.4

Linux Linux kernel=2.4.22

Linux Linux kernel=2.4.18

Linux Linux kernel=2.4.5

Linux Linux kernel=2.4.36.7

Linux Linux kernel=2.6.15.4

Linux Linux kernel=2.6.30.1

Linux Linux kernel=2.6.16.17

Linux Linux kernel=2.4.18

Linux Linux kernel=2.6.16.12

Linux Linux kernel=2.4.18

Linux Linux kernel=2.6.16.27

Linux Linux kernel=2.4.33-p-re1

Linux Linux kernel=2.6.12.6

Linux Linux kernel=2.6.11.7

Linux Linux kernel=2.6.16.2

Linux Linux kernel=2.6.15

Linux Linux kernel=2.4.37.1

Linux Linux kernel=2.4.36

Linux Linux kernel=2.4.27

Linux Linux kernel=2.4.4

Linux Linux kernel=2.4.32--pre1

Linux Linux kernel=2.4.19

Linux Kernel=2.6.25.15

Linux Linux kernel=2.6.14.2

Linux Linux kernel=2.4.36.5

Linux Linux kernel=2.4.27

Linux Linux kernel=2.4.6

Linux Linux kernel=2.4.33.5

Linux Linux kernel=2.4.19

Linux Linux kernel=2.6.30-rc6

Linux Linux kernel=2.4.37--rc1

Linux Linux kernel=2.4.29

Linux Linux kernel=2.6.30-rc1

Linux Linux kernel=2.6.30

Linux Linux kernel=2.6.11.4

Linux Linux kernel=2.6.16.19

Linux Linux kernel=2.4.20

Linux Linux kernel=2.6.11.12

Linux Linux kernel=2.6.16.20

Linux Linux kernel=2.6.15.5

Linux Linux kernel=2.4.36.8

Linux Linux kernel=2.6.30-rc7-git6

Linux Linux kernel=2.6.11.1

Linux Linux kernel=2.6.13.1

Linux Linux kernel=2.6

Linux Linux kernel=2.6.12

Linux Linux kernel>=2.4.4<2.4.37.5

Linux Linux kernel>=2.6.0<2.6.30.5

Debian Debian Linux=4.0

SUSE Linux Enterprise Real Time=10

redhat Enterprise Linux Desktop=4.0

redhat Enterprise Linux Desktop=5.0

redhat Enterprise Linux Eus=4.8

redhat Enterprise Linux Eus=5.3

redhat Enterprise Linux Server=4.0

redhat Enterprise Linux Server=5.0

redhat Enterprise Linux Server Aus=5.3

redhat Enterprise Linux Workstation=4.0

redhat Enterprise Linux Workstation=5.0

Remediation

Event History

Aug 12, 2009

Data Sourced

via Red Hat·02:26 AM

DescriptionSeverityAffected Software

Aug 13, 2009

CVE Published

via Red Hat·12:00 AM

Aug 14, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2009-2692?

CVE-2009-2692 is considered to be a high severity vulnerability due to its potential for local privilege escalation.

How do I fix CVE-2009-2692?

To fix CVE-2009-2692, update your kernel to the recommended versions, such as 0:2.6.24.7-132.el5 or 0:2.6.18-128.7.1.el5.

What are the symptoms of CVE-2009-2692 exploitation?

Exploitation of CVE-2009-2692 may lead to unexpected kernel crashes or system instability due to a NULL pointer dereference.

Which systems are affected by CVE-2009-2692?

CVE-2009-2692 affects various Linux kernel versions, particularly those before version 2.6.30.5.

Can CVE-2009-2692 be exploited without authentication?

Yes, CVE-2009-2692 can be exploited by a local user without requiring authentication, leading to potential privilege escalation.

CVE-2009-2692: Buffer Overflow

Other sources

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2009-2692?

How do I fix CVE-2009-2692?

What are the symptoms of CVE-2009-2692 exploitation?

Which systems are affected by CVE-2009-2692?

Can CVE-2009-2692 be exploited without authentication?

Company

Resources

Contact