CVE-2009-2692

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2009-2692
StatePUBLISHED
Assignermitre
Source PriorityCVE Program / NVD first with legacy fallback
Published2009-08-14 15:16:27 UTC
Updated2026-04-23 00:35:47 UTC
DescriptionThe Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem Types: CWE-908 | n/a

VersionSourceTypeScoreSeverityVector
3.1[email protected]Primary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2.0[email protected]Primary7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 Breakdown

Access Vector
Local
Access Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete

AV:L/AC:L/Au:N/C:C/I:C/A:C

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Linux Linux Kernel All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Na N/a affected n/a Not specified

References

ReferenceSourceLinkTags
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH af854a3a-2127-422b-91ae-364da2661108 www.vupen.com Broken Link, Vendor Advisory
Linux Kernel Sendpage Local Privilege Escalation af854a3a-2127-422b-91ae-364da2661108 www.exploit-db.com Exploit, Third Party Advisory, VDB Entry
Support af854a3a-2127-422b-91ae-364da2661108 www.redhat.com Broken Link
Debian update for linux-2.6 - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Broken Link, Vendor Advisory
[security-announce] SUSE Security Summary Report: SUSE-SR:2009:015 af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List
Repository / Oval Repository af854a3a-2127-422b-91ae-364da2661108 oval.cisecurity.org Broken Link
rhn.redhat.com | Red Hat Support af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
404: File not found af854a3a-2127-422b-91ae-364da2661108 www.kernel.org Broken Link, Vendor Advisory
Linux Kernel Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Broken Link, Vendor Advisory
Linux Kernel 2.4 Incorrect proto_ops Initialisation NULL Pointer Dereference - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Broken Link, Vendor Advisory
Avaya Products Linux Kernel Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Broken Link, Vendor Advisory
Support / Security / Advisories / / MDVSA-2009:233 | Mandriva af854a3a-2127-422b-91ae-364da2661108 www.mandriva.com Broken Link
VMware ESX and vMA Update for Multiple Packages - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Broken Link, Vendor Advisory
SecurityFocus af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Broken Link, Third Party Advisory, VDB Entry
404: File not found af854a3a-2127-422b-91ae-364da2661108 www.kernel.org Broken Link, Vendor Advisory
SecurityFocus af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Broken Link, Third Party Advisory, VDB Entry
iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit af854a3a-2127-422b-91ae-364da2661108 www.exploit-db.com Third Party Advisory, VDB Entry
git.kernel.org af854a3a-2127-422b-91ae-364da2661108 git.kernel.org Broken Link
oss-security - CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc af854a3a-2127-422b-91ae-364da2661108 www.openwall.com Mailing List, Patch
SecurityFocus af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Broken Link, Third Party Advisory, VDB Entry
NEOHAPSIS - Peace of Mind Through Integrity and Insight af854a3a-2127-422b-91ae-364da2661108 archives.neohapsis.com Broken Link, Exploit
Debian -- Security Information -- DSA-1865-1 linux-2.6 af854a3a-2127-422b-91ae-364da2661108 www.debian.org Mailing List, Third Party Advisory
ASA-2009-464 (RHSA-2009-1469) af854a3a-2127-422b-91ae-364da2661108 support.avaya.com Third Party Advisory
Bug 516949 – CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc af854a3a-2127-422b-91ae-364da2661108 bugzilla.redhat.com Issue Tracking, Patch
Red Hat update for kernel - Secunia Advisories - Vulnerability Information - Secunia.com af854a3a-2127-422b-91ae-364da2661108 secunia.com Broken Link, Vendor Advisory
wiki.rpath.com/wiki/Advisories:rPSA-2009-0121 af854a3a-2127-422b-91ae-364da2661108 wiki.rpath.com Broken Link
issues.rpath.com/browse/RPL-3103 af854a3a-2127-422b-91ae-364da2661108 issues.rpath.com Broken Link
cr0 blog: Linux NULL pointer dereference due to incorrect proto_ops initializations (CVE-2009-2692) af854a3a-2127-422b-91ae-364da2661108 blog.cr0.org Exploit, Issue Tracking
Repository / Oval Repository af854a3a-2127-422b-91ae-364da2661108 oval.cisecurity.org Broken Link
kernel/git/torvalds/linux.git - Linux kernel source tree af854a3a-2127-422b-91ae-364da2661108 git.kernel.org Broken Link
404 Not Found af854a3a-2127-422b-91ae-364da2661108 grsecurity.net Broken Link
404: File not found af854a3a-2127-422b-91ae-364da2661108 www.kernel.org Broken Link, Vendor Advisory
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH af854a3a-2127-422b-91ae-364da2661108 www.vupen.com Broken Link, Patch, Vendor Advisory
VMSA-2009-0016.1 af854a3a-2127-422b-91ae-364da2661108 www.vmware.com Third Party Advisory
Repository / Oval Repository af854a3a-2127-422b-91ae-364da2661108 oval.cisecurity.org Broken Link
rhn.redhat.com | Red Hat Support af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
SecurityFocus af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Broken Link, Third Party Advisory, VDB Entry
404 Not Found af854a3a-2127-422b-91ae-364da2661108 zenthought.org Broken Link
Linux Kernel 'sock_sendpage()' NULL Pointer Dereference Vulnerability af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Broken Link, Exploit, Third Party Advisory, VDB Entry
CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.4.37.y.git;a=commit;h=c18d0fe535a73b219f960d1af3d0c264555a12e3 MITRE git.kernel.org
kernel/git/torvalds/linux.git - Linux kernel source tree MITRE git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

OrganizationPublishedContributorStatement
Red Hat2009-09-14Mark J CoxRed Hat is aware of this issue. Please see http://kbase.redhat.com/faq/docs/DOC-18065. Updates for Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG to correct this issue are available: https://rhn.redhat.com/cve/CVE-2009-2692.html

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report