PT-2009-5258 · Linux+1 · Linux Kernel+1

Josh Bressers · Published 2009-10-13 · Updated 2026-02-10 · CVE-2009-2908

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.31

Description: The issue allows local users to cause a denial of service and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference. This can be demonstrated via a Mutt temporary directory in an eCryptfs mount.

Recommendations: For Linux kernel version 2.6.31, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2009-2908

DSA-1915-1

DSA-1928-1

RHSA-2009:1548

RHSA-2009_1548

Affected Products

Linux Kernel

Red Hat

References · 20

• 🔥 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.31.y.git;a=commit;h=afc2b6932f48f200736d3e36ad66fee0ec733136 · Exploit
• https://redhat.com/archives/fedora-package-announce/2009-October/msg00483.html · Vendor Advisory
• http://securityfocus.com/bid/36639 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-2908 · Security Note
• http://ubuntu.com/usn/USN-852-1 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-1548.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=527534 · Note
• http://lists.vmware.com/pipermail/security-announce/2010/000082.html · Note
• https://t.me/aptreports/25834 · Telegram Post
• https://bugs.launchpad.net/ecryptfs/+bug/387073 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6992 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53693 · Note
• http://vupen.com/english/advisories/2010/0528 · Note
• http://openwall.com/lists/oss-security/2009/10/06/1 · Note
• http://secunia.com/advisories/37105 · Note