VULNERABILITY INTELLIGENCE

CVE-2009-3547

CVSS score7 HIGH
EPSS probability4.89%
CISA KEVNot currently listed
Published2009-11-04
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.

Weakness classification

  • nvd@nist.gov: CWE-362

Primary references