CVE-2009-2691

2009-08-1415:16:27

CWE-200

[email protected]

web.nvd.nist.gov

linux

kernel

vulnerability

mm_for_maps

proc

elf loading

setuid process

race condition

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤2.6.30.4

linuxlinux_kernelMatch2.6.30

linuxlinux_kernelMatch2.6.30rc1

linuxlinux_kernelMatch2.6.30rc2

linuxlinux_kernelMatch2.6.30rc3

linuxlinux_kernelMatch2.6.30rc5

linuxlinux_kernelMatch2.6.30rc6

linuxlinux_kernelMatch2.6.30rc7-git6

linuxlinux_kernelMatch2.6.30.1

linuxlinux_kernelMatch2.6.30.2

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle2.6.30.4
linux:linux_kernellinux linux kerneleq2.6.30
linux:linux_kernellinux linux kerneleq2.6.30.1
linux:linux_kernellinux linux kerneleq2.6.30.2

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	2.6.30.4
linux:linux_kernel	linux linux kernel	eq	2.6.30
linux:linux_kernel	linux linux kernel	eq	2.6.30.1
linux:linux_kernel	linux linux kernel	eq	2.6.30.2