CVE-2009-0859
Linux Kernel < 2.6.28.4 - Improper Input Validation
Title source: ruleDescription
The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated by running the ipcs program.
References (22)
... and 2 more
Scores
EPSS
0.0011
EPSS Percentile
29.7%
Classification
CWE
CWE-20
Status
draft
Affected Products (1)
linux/linux_kernel
< 2.6.28.4
Timeline
Published
Mar 09, 2009
Tracked Since
Feb 18, 2026