CVE-2009-2848: Medium severity linux kernel vulnerability
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clearchildtid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONECHILDSETTID or CLONECHILDCLEARTID enabled, which is not properly handled during thread creation and exit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2848?
CVE-2009-2848 has a high severity rating due to its potential to cause a denial of service and possibly allow privilege escalation.
How do I fix CVE-2009-2848?
To fix CVE-2009-2848, upgrade your Linux kernel to a version beyond 2.6.30-rc6 that includes the necessary security patches.
Which systems are affected by CVE-2009-2848?
CVE-2009-2848 affects various Linux kernel versions including 2.6.30 and earlier versions, specifically the rc1 through rc6 releases and some older distributions.
What are the potential impacts of CVE-2009-2848?
The potential impacts of CVE-2009-2848 include memory corruption, denial of service, and unauthorized privilege escalation.
Is CVE-2009-2848 a local or remote vulnerability?
CVE-2009-2848 is a local vulnerability, allowing local users to exploit it for denial of service or privilege escalation.