peter bassill · operator
$ cve CVE-2009-1185 JSON

CVE-2009-1185 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 80.4% (pctl 100)

Patch early

A public exploit exists.

Description

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS80.42% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-346
On CISA KEVno
Public exploityes
Published2009-04-17
Last modified2026-06-16

Affected (9)

VendorProduct
canonicalubuntu linux
debiandebian linux
fedoraprojectfedora
juniperctpview
opensuseopensuse
suselinux enterprise debuginfo
suselinux enterprise desktop
suselinux enterprise server
udev projectudev

Public exploits

SourceTitleDate
exploit-dbLinux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)2012-10-10
exploit-dbLinux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)2009-04-30
exploit-dbLinux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)2009-04-20

References

→ the Explorer  ·  watch your stack  ·  NVD