CVE-2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

81.53% chance of exploitation in the next 30 days, 100th percentile

Published

2009-04-17

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/udev_netlink.rb

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/21848
• https://www.exploit-db.com/exploits/8572
• https://www.exploit-db.com/exploits/8478

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2009/CVE-2009-1185

References

• CVE Record
• NVD entry

Related

• CVE-2009-1171
• CVE-2009-1201
• CVE-2009-1169
• CVE-2009-1203
• CVE-2009-1152
• CVE-2009-1204