{"containers":{"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-07-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks gcc option is omitted, allows local users to gain privileges via vectors involving a NULL pointer dereference and an mmap of /dev/net/tun, a different vulnerability than CVE-2009-1894."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2019-08-21T18:05:42.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"ADV-2009-1925","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/1925"},{"tags":["x_refsource_MISC"],"url":"http://isc.sans.org/diary.html?storyid=6820"},{"tags":["x_refsource_MISC"],"url":"http://grsecurity.net/~spender/cheddar_bay.tgz"},{"name":"[oss-security] 20090717 Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2009/07/17/1"},{"name":"20090716 Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html"},{"name":"linux-kernel-tunchrpoll-code-execution(51803)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51803"},{"name":"[netdev] 20090409 Oops in tun: bisected to Limit amount of queued packets per device","tags":["mailing-list","x_refsource_MLIST"],"url":"http://article.gmane.org/gmane.linux.network/124939"},{"name":"35839","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35839"},{"tags":["x_refsource_CONFIRM"],"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512284"},{"name":"[linux-kernel] 20090706 Re: PROBLEM: tun/tap crashes if open() /dev/net/tun and then poll() it.","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lkml.org/lkml/2009/7/6/19"},{"name":"20090716 Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html"},{"tags":["x_refsource_MISC"],"url":"https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations"}]},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-07T05:27:54.800Z"},"title":"CVE Program Container","references":[{"name":"ADV-2009-1925","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/1925"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://isc.sans.org/diary.html?storyid=6820"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://grsecurity.net/~spender/cheddar_bay.tgz"},{"name":"[oss-security] 20090717 Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2009/07/17/1"},{"name":"20090716 Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0246.html"},{"name":"linux-kernel-tunchrpoll-code-execution(51803)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51803"},{"name":"[netdev] 20090409 Oops in tun: bisected to Limit amount of queued packets per device","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://article.gmane.org/gmane.linux.network/124939"},{"name":"35839","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35839"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512284"},{"name":"[linux-kernel] 20090706 Re: PROBLEM: tun/tap crashes if open() /dev/net/tun and then poll() it.","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lkml.org/lkml/2009/7/6/19"},{"name":"20090716 Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0241.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.redhat.com/en/blog/security-flaws-caused-compiler-optimizations"}]}]},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2009-1897","datePublished":"2009-07-20T17:00:00.000Z","dateReserved":"2009-06-02T00:00:00.000Z","dateUpdated":"2024-08-07T05:27:54.800Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"}