CVE-2009-1184

Linux kernel <2.6.27.22, <2.6.28.x - Privilege Escalation

Title source: llm
STIX 2.1

Description

The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:118
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-793-1
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:135
Various Sources mailing-list x_refsource_mlist
http://lwn.net/Articles/331435/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35656
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/05/04/1
Patch x_refsource_confirm
http://patchwork.ozlabs.org/patch/25238/
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1800
Various Sources x_refsource_misc
https://launchpad.net/bugs/cve/2009-1184
Various Sources mailing-list x_refsource_mlist
http://lwn.net/Articles/331434/
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:119
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35121

Scores

EPSS 0.0035
EPSS Percentile 27.7%

Details

CWE
CWE-16
Status published
Products (50)
linux/linux_kernel 2.2.27
linux/linux_kernel 2.4.36
linux/linux_kernel 2.4.36.1
linux/linux_kernel 2.4.36.2
linux/linux_kernel 2.4.36.3
linux/linux_kernel 2.4.36.4
linux/linux_kernel 2.4.36.5
linux/linux_kernel 2.4.36.6
linux/linux_kernel 2.6
linux/linux_kernel 2.6.0
... and 40 more
Published May 05, 2009
Tracked Since Feb 18, 2026