CVE-2009-1338
Summary
| CVE | CVE-2009-1338 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-22 15:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:L/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | 2.2.27 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.4.36.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.18 | rc7 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.21 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.21.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.21.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.21.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.21 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.22 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22_rc1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22_rc7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23_rc1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24_rc1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24_rc4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24_rc5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.1 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.10 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.11 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.12 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.2 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.3 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.4 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.5 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.6 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.7 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.8 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.25.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.9 | All | x86_64 | All |
| Operating System | Linux | Linux Kernel | 2.6.26 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.26.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.26.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.26.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.26.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.26.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.27.9 | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Ubuntu update for linux and linux-source-2.6.15 - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Debian update for linux-2.6.24 - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| rPath update for kernel - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Debian -- Security Information -- DSA-1787-1 linux-2.6.24 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| oss-security - Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| USN-793-1: Linux kernel vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| oss-security - Re: CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| Red Hat update for kernel-rt - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Debian update for linux-2.6 - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Bug 496031 – CVE-2009-1338 kernel: 'kill sig -1' must only apply to caller's pid namespace | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Patch |
| LKML: "Daniel Hokka Zakrisson": Re: [PATCH 1/2] signals: kill(-1) should only signal processes in the same namespace | af854a3a-2127-422b-91ae-364da2661108 | lkml.org | Patch |
| git.kernel.org | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | |
| 404: File not found | af854a3a-2127-422b-91ae-364da2661108 | www.kernel.org | Patch, Vendor Advisory |
| Debian -- Security Information -- DSA-1800-1 linux-2.6 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| wiki.rpath.com/Advisories:rPSA-2009-0084 | af854a3a-2127-422b-91ae-364da2661108 | wiki.rpath.com | |
| oss-security - CVE request: kernel: 'kill sig -1' must only apply to caller's PID namespace | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | MITRE | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2009-09-10 | Tomas Hoger | This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5. It was addressed in Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2009-1081.html . |
There are currently no legacy QID mappings associated with this CVE.