NetSight
high7.2Public exploit code

CVE-2009-2767

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.

Affected products

VendorProductAffected versions
LinuxKernel
Versions 2.6.24.7, 2.6.25.15
LinuxLinux Kernel
through 2.6.16.31
Versions 2.6, 2.6.0, 2.6.1, 2.6.10, 2.6.11

Weakness classification

References