CVE-2009-2692

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.

Weakness

The product uses or accesses a resource that has not been initialized.

Affected Software

Name	Vendor	Start Version	End Version
Linux_kernel	Linux	2.4.4 (including)	2.4.37.5 (excluding)
Linux_kernel	Linux	2.6.0 (including)	2.6.30.5 (excluding)
MRG for RHEL-5	RedHat	kernel-rt-0:2.6.24.7-132.el5rt	*
Red Hat Enterprise Linux 3	RedHat	kernel-0:2.4.21-60.EL	*
Red Hat Enterprise Linux 4	RedHat	kernel-0:2.6.9-89.0.9.EL	*
Red Hat Enterprise Linux 4.7 Z Stream	RedHat	kernel-0:2.6.9-78.0.27.EL	*
Red Hat Enterprise Linux 5	RedHat	kernel-0:2.6.18-128.7.1.el5	*
Red Hat Enterprise Linux 5.2 Z Stream	RedHat	kernel-0:2.6.18-92.1.28.el5	*
Linux	Ubuntu	hardy	*
Linux	Ubuntu	intrepid	*
Linux	Ubuntu	jaunty	*
Linux	Ubuntu	upstream	*
Linux-source-2.6.15	Ubuntu	dapper	*
Linux-source-2.6.15	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2009-2692
CWE	https://cwe.mitre.org/data/definitions/908.html

Use of Uninitialized Resource

Weakness

Affected Software

Potential Mitigations

References