NetSight
IP …
high7.2Public exploit code

CVE-2009-4141

Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via v…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.33
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4

Weakness classification

CWE-399

References