CVE-2009-2849

kernel: md: NULL pointer deref when accessing suspend_* sysfs attributes

Published Aug 18, 2009 CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Description
The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1872-1 New Linux 2.6.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1928-1 New Linux 2.6.24 packages fix several vulnerabilities
EUVD EUVD EUVD-2009-2839 The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.
Ubuntu USN Ubuntu USN USN-852-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:07 AM
Reserved
Aug 18, 2009, 12:00 AM
Status
Modified
Published
Aug 18, 2009, 9:00 PM
Modified
Jun 16, 2026, 11:10 PM
Severity
Moderate
Public date
Jul 1, 2009, 12:00 AM