CVE-2009-0835

Published: Mar 6, 2009Modified: Apr 23, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.

Affected (13)

Products: Linux: Linux Kernel

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.25.10
Linux Linux Kernel	Version 2.6.25.11
Linux Linux Kernel	Version 2.6.25.12
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25.9
Linux Linux Kernel	Version 2.6.25

Related CWEs

References (48)

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

http://lkml.org/lkml/2009/2/28/23

Source: cve@mitre.org

http://marc.info/?l=linux-kernel&m=123579056530191&w=2

Source: cve@mitre.org

http://marc.info/?l=linux-kernel&m=123579069630311&w=2

Source: cve@mitre.org

Exploit

http://marc.info/?l=oss-security&m=123597627132485&w=2

Source: cve@mitre.org

http://scary.beasts.org/security/CESA-2009-001.html

Source: cve@mitre.org

Exploit

http://scary.beasts.org/security/CESA-2009-004.html

Source: cve@mitre.org

http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html

Source: cve@mitre.org

http://secunia.com/advisories/34084

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34786

Source: cve@mitre.org

http://secunia.com/advisories/34917

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35121

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35185

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35390

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35394

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2009/dsa-1800

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:118

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0451.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/33948

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-751-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=487255

Source: cve@mitre.org

Exploit

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lkml.org/lkml/2009/2/28/23

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=linux-kernel&m=123579056530191&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=linux-kernel&m=123579069630311&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://marc.info/?l=oss-security&m=123597627132485&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://scary.beasts.org/security/CESA-2009-001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://scary.beasts.org/security/CESA-2009-004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34084

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34786

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34917

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35121

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35185

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35390

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35394

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2009/dsa-1800

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:118

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0451.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33948

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-751-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=487255

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.