CVE-2009-2584

Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.52% chance of exploitation in the next 30 days, 42th percentile

Published

2009-07-23

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/

References

• CVE Record
• NVD entry

Related

• CVE-2009-2579
• CVE-2009-2585
• CVE-2009-2574
• CVE-2009-2586
• CVE-2009-2573
• CVE-2009-2587