Vulnerability identifier: #VU92640

Vulnerability risk: Low

CVSSv3.1: 6.3 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2009-3547

CWE-ID: CWE-362

Exploitation vector: Local

Exploit availability: Yes

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to concurrent execution using shared resource with improper synchronization ('race condition') error. A local user can execute arbitrary code.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel:

---

External links
http://rhn.redhat.com/errata/RHSA-2009-1540.html
http://lkml.org/lkml/2009/10/21/42
http://www.securityfocus.com/bid/36901
http://lkml.org/lkml/2009/10/14/184
http://bugzilla.redhat.com/show_bug.cgi?id=530490
http://marc.info/?l=oss-security&m=125724568017045&w=2
http://rhn.redhat.com/errata/RHSA-2009-1548.html
http://rhn.redhat.com/errata/RHSA-2009-1541.html
http://rhn.redhat.com/errata/RHSA-2009-1550.html
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html
http://secunia.com/advisories/37351
http://www.redhat.com/archives/fedora-package-announce/2009-November/msg00190.html
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329
http://www.redhat.com/support/errata/RHSA-2009-1672.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html
http://secunia.com/advisories/38017
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
http://www.ubuntu.com/usn/usn-864-1
http://secunia.com/advisories/38794
http://www.vupen.com/english/advisories/2010/0528
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://secunia.com/advisories/38834
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc6
http://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9327
http://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7608
http://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11513
http://www.securityfocus.com/archive/1/512019/100/0/threaded
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ad3960243e55320d74195fb85c975e0a8cc4466c

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.