{"id":"CVE-2009-3621","url":"https://www.cyber-defence.io/tools/cve/CVE-2009-3621","generatedAt":"2026-10-27T21:08:07.111Z","title":"net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a…","description":"net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.","published":"2009-10-22T16:00:01.000Z","lastModified":"2026-06-16T23:12:02.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-400"],"affected":["linux/linux kernel","canonical/ubuntu linux","fedoraproject/fedora","opensuse/opensuse","suse/suse linux enterprise desktop","suse/suse linux enterprise server","vmware/vma","vmware/esx"],"epss":{"score":0.00987,"percentile":0.62194,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2009-11-10","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":10022,"kind":"exploit","title":"Linux Kernel 2.6.31.4 - 'unix_stream_connect()' Local Denial of Service","url":"https://www.exploit-db.com/exploits/10022","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/10022.c","file":"exploits/linux/dos/10022.c","published":"2009-11-10","added":"2009-11-09","updated":null,"author":"Tomoki Sekiyama","type":"dos","platform":"linux","port":null,"verified":true,"codes":["CVE-2009-3621"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB (verified), so the technical barrier is gone even though the severity is medium and EPSS is 1.0%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lkml.org/lkml/2009/10/19/50","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://patchwork.kernel.org/patch/54678/","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37086","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37909","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38017","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/2","tags":["Exploit","Mailing List","Patch","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/4","tags":["Exploit","Mailing List","Patch","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-864-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","tags":["Exploit","Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=77238f2b942b38ab4e7f3aced44084493e4a8675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2009/10/19/50","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://patchwork.kernel.org/patch/54678/","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37086","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37909","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38017","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:329","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/2","tags":["Exploit","Mailing List","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/10/19/4","tags":["Exploit","Mailing List","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1670.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1671.html","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-864-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","tags":["Exploit","Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6895","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9921","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-3621","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}