CVE-2009-4141

Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC) on a locked file, and then closing this file.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.97% chance of exploitation in the next 30 days, 61st percentile

Published

2010-01-19

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33523

Security advisories

• http://secunia.com/advisories/38199
• http://twitter.com/taviso/statuses/7744108017
• http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.33-rc4-git1.bz2
• http://www.redhat.com/support/errata/RHSA-2010-0161.html
• http://www.securityfocus.com/bid/37806

References

• CVE Record
• NVD entry