CVE-2009-2848

Published: Aug 18, 2009Modified: Apr 23, 2026

5.9

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:C

Exploitability: 3.4 / Impact: 8.5

Source: NVD

Description

The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.

Affected (26)

Products: Linux: Linux Kernel · Novell: Linux Desktop · Opensuse: Opensuse · +5 more

Show all products

1 product

1 product

1 product

2 products

Linux Enterprise Desktop

Linux Enterprise Server

1 product

1 product

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Vmware

2 products

Esx

Vma

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.29.5
Linux Linux Kernel	Version 2.6.30
Linux Linux Kernel	Version 2.6.30 rc1
Linux Linux Kernel	Version 2.6.30 rc2
Linux Linux Kernel	Version 2.6.30 rc3
Linux Linux Kernel	Version 2.6.30 rc4
Linux Linux Kernel	Version 2.6.30 rc5
Linux Linux Kernel	Version 2.6.30 rc6

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Novell Linux Desktop	Version 9
Opensuse Opensuse	Version 11.0
Suse Linux Enterprise Desktop	Version 10 sp2
Suse Linux Enterprise Server	Version 10 sp2
Suse Linux Enterprise Server	Version 9

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 11

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Server	Version 3.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Workstation	Version 3.0
Redhat Enterprise Linux Workstation	Version 5.0

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 4.0

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Vma	Version 4.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 5.0

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (52)

http://article.gmane.org/gmane.linux.kernel/871942

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2009-1243.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/35983

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/36501

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/36562

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/36759

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/37105

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/37351

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/37471

Source: cve@mitre.org

Broken Link

http://www.openwall.com/lists/oss-security/2009/08/04/2

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2009/08/05/10

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2009-1438.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/512019/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-852-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/52899

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598

Source: cve@mitre.org

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766

Source: cve@mitre.org

Third Party Advisory

https://rhn.redhat.com/errata/RHSA-2009-1550.html

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://article.gmane.org/gmane.linux.kernel/871942