← Database

CVE-2009-2698

HIGH CVSS: 7.8 Published: 2009-08-27 Modified: 2026-06-16

Description

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Affected Platforms

Canonical Ubuntu LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerFedoraproject FedoraVmware Vcenter ServerRedhat Enterprise Linux Server AusSuse Linux Enterprise DesktopLinux Linux Kernel

Weakness Type

CWE-476

References