CVE-2009-2692 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-2692 Interim 1 12 2024-02-21T02:11:55Z current 2021-05-30T12:47:55Z 2024-02-21T02:11:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-2692 The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MZ7SGVDOLVRKPES5OF75642QUQHTIIED/#MZ7SGVDOLVRKPES5OF75642QUQHTIIED E-Mail link for SUSE-SA:2009:045 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LUR3YYO2WM7DRXSSFKXTUHURRCIUR55X/#LUR3YYO2WM7DRXSSFKXTUHURRCIUR55X E-Mail link for SUSE-SR:2009:015 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server for SAP Applications 11 ext4dev-kmp-default-0_2.6.27.29_0.1-7.1.13 ext4dev-kmp-pae-0_2.6.27.29_0.1-7.1.13 ext4dev-kmp-ppc64-0_2.6.27.29_0.1-7.1.13 ext4dev-kmp-vmi-0_2.6.27.29_0.1-7.1.13 ext4dev-kmp-xen-0_2.6.27.29_0.1-7.1.13 iscsitarget-kmp-default-0.4.15_2.6.27.54_0.2-94.14.8 kernel-default-2.6.27.29-0.1.1 kernel-default-base-2.6.27.29-0.1.1 kernel-default-man-2.6.27.29-0.1.1 kernel-kdump-2.6.27.29-0.1.1 kernel-pae-2.6.27.29-0.1.1 kernel-pae-base-2.6.27.29-0.1.1 kernel-ppc64-2.6.27.29-0.1.1 kernel-ppc64-base-2.6.27.29-0.1.1 kernel-source-2.6.27.29-0.1.1 kernel-syms-2.6.27.29-0.1.1 kernel-vmi-2.6.27.29-0.1.1 kernel-vmi-base-2.6.27.29-0.1.1 kernel-xen-2.6.27.29-0.1.1 kernel-xen-base-2.6.27.29-0.1.1 oracleasm-kmp-default-2.0.5_2.6.27.54_0.2-7.9.1 ext4dev-kmp-default-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server 11 ext4dev-kmp-pae-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server 11 ext4dev-kmp-ppc64-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server 11 ext4dev-kmp-vmi-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server 11 ext4dev-kmp-xen-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server 11 iscsitarget-kmp-default-0.4.15_2.6.27.54_0.2-94.14.8 as a component of SUSE Linux Enterprise Server 11 kernel-default-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-default-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-default-man-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-kdump-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-pae-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-pae-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-ppc64-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-ppc64-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-source-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-syms-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-vmi-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-vmi-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-xen-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 kernel-xen-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server 11 oracleasm-kmp-default-2.0.5_2.6.27.54_0.2-7.9.1 as a component of SUSE Linux Enterprise Server 11 ext4dev-kmp-default-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ext4dev-kmp-pae-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ext4dev-kmp-ppc64-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ext4dev-kmp-vmi-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ext4dev-kmp-xen-0_2.6.27.29_0.1-7.1.13 as a component of SUSE Linux Enterprise Server for SAP Applications 11 iscsitarget-kmp-default-0.4.15_2.6.27.54_0.2-94.14.8 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-default-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-default-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-default-man-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-kdump-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-pae-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-pae-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-ppc64-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-ppc64-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-source-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-syms-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-vmi-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-vmi-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-xen-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 kernel-xen-base-2.6.27.29-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 oracleasm-kmp-default-2.0.5_2.6.27.54_0.2-7.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket. CVE-2009-2692 SUSE Linux Enterprise Server 11:ext4dev-kmp-default-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server 11:ext4dev-kmp-pae-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server 11:ext4dev-kmp-ppc64-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server 11:ext4dev-kmp-vmi-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server 11:ext4dev-kmp-xen-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server 11:iscsitarget-kmp-default-0.4.15_2.6.27.54_0.2-94.14.8 SUSE Linux Enterprise Server 11:kernel-default-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-default-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-default-man-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-kdump-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-pae-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-pae-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-ppc64-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-ppc64-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-source-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-syms-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-vmi-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-vmi-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-xen-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:kernel-xen-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server 11:oracleasm-kmp-default-2.0.5_2.6.27.54_0.2-7.9.1 SUSE Linux Enterprise Server for SAP Applications 11:ext4dev-kmp-default-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server for SAP Applications 11:ext4dev-kmp-pae-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server for SAP Applications 11:ext4dev-kmp-ppc64-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server for SAP Applications 11:ext4dev-kmp-vmi-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server for SAP Applications 11:ext4dev-kmp-xen-0_2.6.27.29_0.1-7.1.13 SUSE Linux Enterprise Server for SAP Applications 11:iscsitarget-kmp-default-0.4.15_2.6.27.54_0.2-94.14.8 SUSE Linux Enterprise Server for SAP Applications 11:kernel-default-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-default-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-default-man-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-kdump-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-pae-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-pae-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-ppc64-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-ppc64-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-source-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-syms-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-vmi-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-vmi-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-xen-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:kernel-xen-base-2.6.27.29-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:oracleasm-kmp-default-2.0.5_2.6.27.54_0.2-7.9.1 important 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H