← Database

CVE-2009-1185

HIGH CVSS: 7.2 Published: 2009-04-17 Modified: 2026-06-16

Description

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

Affected Platforms

Canonical Ubuntu LinuxUdev Project UdevFedoraproject FedoraSuse Linux Enterprise DebuginfoSuse Linux Enterprise DesktopDebian Debian LinuxOpensuse OpensuseJuniper CtpviewSuse Linux Enterprise Server

Weakness Type

CWE-346

References