CVE-2009-1337 Privilege escalation in n/a
Local attackers can escalate privileges by exploiting a flaw in the Linux kernel's exit signal handling to send arbitrary signals to setuid applications.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-1337?
CVE-2009-1337 is a medium-severity vulnerability in Linux kernel, published on 22 Apr 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.
Weakness: CWE-264
Which versions are affected by CVE-2009-1337?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2009-1337?
Upgrade to a fixed version.
Is CVE-2009-1337 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-1337 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-w3gg-x9j7-v653.