CVE-2009-0834

Published: Mar 6, 2009Modified: Apr 23, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

Affected (20)

Products: Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux · +3 more

Show all products

Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Workstation · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit

1 product

1 product

1 product

5 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Workstation

Opensuse

1 product

Opensuse

Suse

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.28.7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Eus	Version 4.7
Redhat Enterprise Linux Eus	Version 5.3
Redhat Enterprise Linux Server	Version 4.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server Aus	Version 5.3
Redhat Enterprise Linux Workstation	Version 4.0
Redhat Enterprise Linux Workstation	Version 5.0

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.3
Opensuse Opensuse	Version 11.0
Suse Linux Enterprise Desktop	Version 10 sp2
Suse Linux Enterprise Server	Version 10 sp2
Suse Linux Enterprise Software Development Kit	Version 10 sp2

References (78)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=linux-kernel&m=123579056530191&w=2

Source: cve@mitre.org

Third Party Advisory

http://marc.info/?l=linux-kernel&m=123579065130246&w=2

Source: cve@mitre.org

Third Party Advisory

http://marc.info/?l=oss-security&m=123597642832637&w=2

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2009-0459.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2009-0473.html

Source: cve@mitre.org

Third Party Advisory

http://scary.beasts.org/security/CESA-2009-001.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34084

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34917

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34962

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34981

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35011

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35015

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35120

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35121

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35185

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35390

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35394

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/37471

Source: cve@mitre.org

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0084

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2009/dsa-1787

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2009/dsa-1794

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2009/dsa-1800

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:118

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2009-0451.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/503610/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/33951

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1022153

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-751-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=487990

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49061

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8508

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9600

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c