NetSight
medium4.7

CVE-2009-2849

The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors…

Impact

The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.30.1
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4

References