peter bassill · operator
$ cve CVE-2009-3621 JSON

CVE-2009-3621 EXPLOIT

5.5
MEDIUM · CVSS 3.1 · EPSS 1% (pctl 61)

Patch early

A public exploit exists.

Description

net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.

Scoring

CVSS5.5 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS0.99% — more likely to be exploited than 61% of all CVEs
WeaknessCWE-400
On CISA KEVno
Public exploityes
Published2009-10-22
Last modified2026-06-16

Affected (8)

VendorProduct
canonicalubuntu linux
fedoraprojectfedora
linuxlinux kernel
opensuseopensuse
susesuse linux enterprise desktop
susesuse linux enterprise server
vmwareesx
vmwarevma

Public exploits

SourceTitleDate
exploit-dbLinux Kernel 2.6.31.4 - 'unix_stream_connect()' Local Denial of Service2009-11-10

References

→ the Explorer  ·  watch your stack  ·  NVD