CVE-2009-4895

Description

Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions. NOTE: the vulnerability was addressed in a different way in 2.6.32.9.

Weakness classification

• CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CWE-476: NULL Pointer Dereference

Primary references

• cve@mitre.org — Broken Link
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Issue Tracking, Patch
• cve@mitre.org — Issue Tracking, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory