CVE-2009-4141

Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.98% chance of exploitation in the next 30 days, 60th percentile

Published

2010-01-19

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33523

References

• CVE Record
• NVD entry

Related

• CVE-2009-4140
• CVE-2009-4142
• CVE-2009-4137
• CVE-2009-4146
• CVE-2009-4131
• CVE-2009-4147