CVE-2009-0935 : The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper synchronization of a data structure for the inotify instance.

Published 2009-03-18 02:00:08

Updated 2024-02-09 00:39:40

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2009-0935

Linux » Linux Kernel
Versions from including (>=) 2.6.28 and up to, including, (<=) 2.6.28.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 2.6.27 and up to, including, (<=) 2.6.27.13
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 2.6.29 Update RC3
cpe:2.3:o:linux:linux_kernel:2.6.29:rc3:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2009-0935

Top countries where our scanners detected CVE-2009-0935

Top open port discovered on systems with this issue 52869

IPs affected by CVE-2009-0935 247,613

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2009-0935!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2009-0935

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-0935

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.7	MEDIUM	AV:L/AC:M/Au:N/C:N/I:N/A:C	3.4	6.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST	2024-02-09
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2009-0935

CWE-399

Assigned by: nvd@nist.gov (Primary)
CWE-667 Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Assigned by: nvd@nist.gov (Primary)

Vendor statements for CVE-2009-0935

Red Hat 2009-04-15

Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, or Red Hat Enterprise MRG.

References for CVE-2009-0935

https://bugzilla.redhat.com/show_bug.cgi?id=488935

488935 – (CVE-2009-0935) CVE-2009-0935 kernel: inotify local DoS
Issue Tracking;Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/49331

Linux Kernel inotify_read function denial of service CVE-2009-0935 Vulnerability Report
Third Party Advisory;VDB Entry
http://www.openwall.com/lists/oss-security/2009/03/18/5

oss-security - Re: CVE request: kernel: inotify local DoS
Mailing List
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3

404: File not found
Broken Link
http://www.openwall.com/lists/oss-security/2009/03/06/2

oss-security - CVE request: kernel: inotify local DoS
Mailing List;Patch
http://www.securityfocus.com/bid/33624

Broken Link;Patch;Third Party Advisory;VDB Entry
http://www.openwall.com/lists/oss-security/2009/03/19/2

oss-security - Re: CVE request: kernel: inotify local DoS
Mailing List
http://marc.info/?l=linux-kernel&m=123337123501681&w=2

'[patch 03/43] inotify: clean up inotify_read and fix locking' - MARC
Mailing List;Patch

Jump to