PT-2009-5087 · Linux+1 · Linux Kernel+1
Eugene Teo
+1
·
Published
2009-08-28
·
Updated
2017-09-19
·
CVE-2009-2695
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.31-rc7
Description
The issue allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities. This is related to the default configuration of the
allow unconfined mmap low boolean in SELinux, an error that causes allow unconfined mmap low to be ignored, lack of a requirement for the CAP SYS RAWIO capability for certain mmap operations, and interaction between the mmap min addr protection mechanism and certain application programs.Recommendations
For Linux kernel versions prior to 2.6.31-rc7, update to version 2.6.31-rc7 or later to resolve the issue. As a temporary workaround, consider restricting the use of mmap operations that target low memory addresses to minimize the risk of exploitation. Additionally, review and adjust the configuration of the
allow unconfined mmap low boolean in SELinux to ensure it is properly set.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat