CVE-2009-2767
published 2009-08-14CVE-2009-2767: The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or…
PriorityP430high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.74%
50.5th percentile
The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.
Affected
75 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | kernel | — | — |
| linux | kernel | — | — |
| linux | linux_kernel | <= 2.6.16.31 | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.2HIGH
vendor_ubuntu4.4MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2009-10-22·CVSS 4.4
CVE-2009-3238 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Linux kernel vulnerabilities
Solar Designer discovered that the z90crypt driver did not correctly
check capabilities. A local attacker could exploit this to shut down
the device, leading to a denial of service. Only affected Ubuntu 6.06.
(CVE-2009-1883)
Michael Buesch discovered that the SGI GRU driver did not correctly check
the length when setting options. A local attacker could exploit this
to write to the kernel stack, leading to root privilege escalation or
a denial of service. Only affected Ubuntu 8.10 and 9.04. (CVE-2009-2584)
It was discovered that SELinux did not fully implement the mmap_min_addr
restrictions. A local attacker could exploit this to allocate the
NULL memory page which could lead to further attacks against kernel
NULL
Red Hat
kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference
vendor_redhat·2009-08-03·CVSS 7.2
CVE-2009-2767 [HIGH] CWE-476 kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference
kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference
The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.
Statement: Not vulnerable. This issue only affected kernels version 2.6.28-rc1 and later.
Therefore this issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG..
GHSA
GHSA-j7ff-hmc8-4xc8: The init_posix_timers function in kernel/posix-timers
ghsa_unreviewed·2022-05-02
CVE-2009-2767 [HIGH] CWE-119 GHSA-j7ff-hmc8-4xc8: The init_posix_timers function in kernel/posix-timers
The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.
No detection rules found.
Bugzilla
CVE-2009-2767 kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference
bugzilla·2009-08-06·CVSS 7.2
CVE-2009-2767 [HIGH] CVE-2009-2767 kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference
CVE-2009-2767 kernel: clock_nanosleep() with CLOCK_MONOTONIC_RAW NULL pointer dereference
Description of problem:
Calling do_nanosleep() with clockid CLOCK_MONOTONIC_RAW can cause a NULL pointer dereference. Appears to be introduced after commit 2d42244a (v2.6.28-rc1).
Upstream commit:
http://git.kernel.org/linus/70d715fd0597f18528f389b5ac59102263067744
Reproducer/backtrace:
http://lkml.org/lkml/2009/8/4/28
References:
http://lkml.org/lkml/2009/8/2/331
http://lkml.org/lkml/2009/8/4/40
Discussion:
kernel-2.6.29.6-217.2.8.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/kernel-2.6.29.6-217.2.8.fc11
---
kernel-2.6.30.5-28.rc2.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/kernel-2.6.30.5-28.rc2.fc11
arXiv
Timeloops: Automatic System Call Policy Learning for Containerized Microservices
arxiv_fulltext·2022-09-26
Timeloops: Automatic System Call Policy Learning for Containerized Microservices
Meghna Pancholi
[email protected]
Columbia University
Andreas D. Kellas
[email protected]
Columbia University
Vasileios P. Kemerlis
[email protected]
Brown University
Simha Sethumadhavan
[email protected]
Columbia University
## Abstract
We introduce , a novel technique for automatically learning system
call filtering policies for containerized microservices applications. At
run-time, automatically learns which system calls a program should
be allowed to invoke, while rejecting attempts to call spurious system calls.
Further, addresses many of the shortcomings of state-of-the-art
static analysis-based techniques, such as the ability to generate tight filters
for programs written in interpreted languages such as PHP, Python, and
JavaScript. has a simple and rob
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744http://lkml.org/lkml/2009/8/4/28http://lkml.org/lkml/2009/8/4/40http://secunia.com/advisories/36200http://secunia.com/advisories/37105http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6http://www.openwall.com/lists/oss-security/2009/08/06/2http://www.ubuntu.com/usn/USN-852-1http://www.vupen.com/english/advisories/2009/2197https://exchange.xforce.ibmcloud.com/vulnerabilities/52317http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=70d715fd0597f18528f389b5ac59102263067744http://lkml.org/lkml/2009/8/4/28http://lkml.org/lkml/2009/8/4/40http://secunia.com/advisories/36200http://secunia.com/advisories/37105http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6http://www.openwall.com/lists/oss-security/2009/08/06/2http://www.ubuntu.com/usn/USN-852-1http://www.vupen.com/english/advisories/2009/2197https://exchange.xforce.ibmcloud.com/vulnerabilities/52317
2009-08-14
Published