CVE-2009-2692 vulnerability in Linux and Other Products
Published on August 14, 2009
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
Products Associated with CVE-2009-2692
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2009-2692 are published in these products:
Exploit Probability
EPSS
17.16%
Percentile
94.92%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.