NetSight
IP …
low3.6

CVE-2009-0834

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit …

Impact

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.28.7
DebianDebian Linux
Versions 4.0, 5.0
CanonicalUbuntu Linux
Versions 7.10, 8.04, 8.10
RedhatEnterprise Linux Desktop
Versions 4.0, 5.0
RedhatEnterprise Linux Eus
Versions 4.7, 5.3
RedhatEnterprise Linux Server
Versions 4.0, 5.0
RedhatEnterprise Linux Server Aus
Version 5.3
RedhatEnterprise Linux Workstation
Versions 4.0, 5.0
OpensuseOpensuse
Versions 10.3, 11.0
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Server
Version 10
SuseLinux Enterprise Software Development Kit
Version 10

References