VulnerabilityModified

CVE-2009-0935

The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device's event list…

MEDIUM 5.5EPSS 0.27%

Does this matter?

Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.27% probability · 19th percentile
CISA KEV: Not listed
Weakness: CWE-667
Affected: linux/linux kernel
Source: cve@mitre.org

References

http://marc.info/?l=linux-kernel&m=123337123501681&w=2Mailing List, Patch
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3Broken Link
http://www.openwall.com/lists/oss-security/2009/03/06/2Mailing List, Patch
http://www.openwall.com/lists/oss-security/2009/03/18/5Mailing List
http://www.openwall.com/lists/oss-security/2009/03/19/2Mailing List
http://www.securityfocus.com/bid/33624Broken Link, Patch, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=488935Issue Tracking, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/49331Third Party Advisory, VDB Entry
http://marc.info/?l=linux-kernel&m=123337123501681&w=2Mailing List, Patch
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.3Broken Link
http://www.openwall.com/lists/oss-security/2009/03/06/2Mailing List, Patch
http://www.openwall.com/lists/oss-security/2009/03/18/5Mailing List
http://www.openwall.com/lists/oss-security/2009/03/19/2Mailing List
http://www.securityfocus.com/bid/33624Broken Link, Patch, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=488935Issue Tracking, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/49331Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.