NetSight
IP …
high7.0Public exploit code

CVE-2009-3547

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.31.14
Version 2.6.32
NovellLinux Desktop
Version 9
OpensuseOpensuse
Versions 11.0, 11.2
SuseSuse Linux Enterprise Desktop
Version 10
SuseSuse Linux Enterprise Server
Version 10
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04, 9.10
FedoraprojectFedora
Version 10
VmwareVma
Version 4.0
VmwareEsx
Version 4.0
RedhatMrg Realtime
Version 1.0
RedhatEnterprise Linux Desktop
Versions 3.0, 4.0, 5.0
RedhatEnterprise Linux Eus
Versions 4.8, 5.4

Weakness classification

CWE-362CWE-476CWE-672

References