{"id":"CVE-2009-0835","url":"https://www.cyber-defence.io/tools/cve/CVE-2009-0835","generatedAt":"2026-10-27T18:33:21.534Z","title":"The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a…","description":"The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.","published":"2009-03-06T11:30:03.000Z","lastModified":"2026-06-16T23:05:55.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":3.6,"severity":"LOW","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N"},"cwe":["CWE-264"],"affected":["linux/linux kernel"],"epss":{"score":0.00928,"percentile":0.6026,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2009-03-02","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":32829,"kind":"exploit","title":"Linux Kernel 2.6.x - 'seccomp' System Call Security Bypass","url":"https://www.exploit-db.com/exploits/32829","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/32829.c","file":"exploits/linux/local/32829.c","published":"2009-03-02","added":"2009-03-02","updated":"2014-04-12","author":"Chris Evans","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2009-0835","OSVDB-52462"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/33948/info"}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB (verified), so the technical barrier is gone even though the severity is low and EPSS is 0.9%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2009/2/28/23","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123579056530191&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=123579069630311&w=2","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=123597627132485&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2009-004.html","source":"cve@mitre.org"},{"url":"http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34084","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34917","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35121","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35185","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35390","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35394","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/33948","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487255","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/2/28/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123579056530191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=123579069630311&w=2","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=123597627132485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2009-001.html","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2009-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34084","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34917","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35121","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35185","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35390","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35394","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0451.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-751-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=487255","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0835","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}