CVE-2009-1238
macOS X < 10.5.6 - Denial of Service via HFS vfs sysctl Race Condition
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1238. PoCs published by mu-b.
AI-analyzed exploit summary This exploit targets a local kernel DoS vulnerability in Apple MACOS X xnu <= 1228.x by repeatedly calling sysctl with crafted arguments to trigger a denial-of-service condition. It spawns multiple threads to amplify the effect.
Description
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.
Exploits (1)
This exploit targets a local kernel DoS vulnerability in Apple MACOS X xnu <= 1228.x by repeatedly calling sysctl with crafted arguments to trigger a denial-of-service condition. It spawns multiple threads to amplify the effect.