CVE-2009-2691

Published: Aug 14, 2009Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.

Affected (10)

Products: Linux: Linux Kernel

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	version ≤ 2.6.30.4
Linux Linux Kernel	Version 2.6.30.1
Linux Linux Kernel	Version 2.6.30.2
Linux Linux Kernel	Version 2.6.30
Linux Linux Kernel	Version 2.6.30 rc1
Linux Linux Kernel	Version 2.6.30 rc2
Linux Linux Kernel	Version 2.6.30 rc3
Linux Linux Kernel	Version 2.6.30 rc5
Linux Linux Kernel	Version 2.6.30 rc6
Linux Linux Kernel	Version 2.6.30 rc7-git6

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (34)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d

Source: cve@mitre.org

http://lkml.org/lkml/2009/6/23/652

Source: cve@mitre.org

http://lkml.org/lkml/2009/6/23/653

Source: cve@mitre.org

Patch

http://marc.info/?l=linux-kernel&m=124718946021193

Source: cve@mitre.org

Patch

http://marc.info/?l=linux-kernel&m=124718949821250

Source: cve@mitre.org

Patch

http://secunia.com/advisories/36265

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/36501

Source: cve@mitre.org

http://www.debian.org/security/2010/dsa-2005

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/08/11/1

Source: cve@mitre.org

http://www.securityfocus.com/bid/36019

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/2246

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=516171

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/52401

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2009-1540.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d

Source: af854a3a-2127-422b-91ae-364da2661108

http://lkml.org/lkml/2009/6/23/652

Source: af854a3a-2127-422b-91ae-364da2661108

http://lkml.org/lkml/2009/6/23/653

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://marc.info/?l=linux-kernel&m=124718946021193

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://marc.info/?l=linux-kernel&m=124718949821250

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/36265

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/36501

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2010/dsa-2005

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/08/11/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/36019

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/2246

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=516171

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/52401

Source: af854a3a-2127-422b-91ae-364da2661108

https://rhn.redhat.com/errata/RHSA-2009-1540.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.