CVE-2009-2767

Linux Kernel < 2.6.31-rc6 - Denial of Service or Privilege Escalation via CLOCK_MONOTONIC_RAW clock_nanosleep

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2767. PoCs published by Hiroshi Shimamoto.

AI-analyzed exploit summary This exploit triggers a local denial-of-service vulnerability in the Linux kernel by calling clock_nanosleep with an invalid clock ID (4), causing a kernel crash. The issue was introduced in Linux kernel 2.6.28-rc1 and fixed in 2.6.31-rc5-git3.

Description

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Hiroshi Shimamoto · cdoslinux
https://www.exploit-db.com/exploits/33148

This exploit triggers a local denial-of-service vulnerability in the Linux kernel by calling clock_nanosleep with an invalid clock ID (4), causing a kernel crash. The issue was introduced in Linux kernel 2.6.28-rc1 and fixed in 2.6.31-rc5-git3.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Linux kernel versions 2.6.28-rc1 to 2.6.31-rc5-git3
No auth needed
Prerequisites: Local access to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36200
Patch mailing-list x_refsource_mlist
http://lkml.org/lkml/2009/8/4/40
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2197
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-852-1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/08/06/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/52317
Patch mailing-list x_refsource_mlist
http://lkml.org/lkml/2009/8/4/28
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37105

Scores

EPSS 0.0074
EPSS Percentile 49.7%

Details

CWE
CWE-119
Status published
Products (50)
linux/kernel 2.6.24.7
linux/kernel 2.6.25.15
linux/linux_kernel 2.6
linux/linux_kernel 2.6.0
linux/linux_kernel 2.6.1
linux/linux_kernel 2.6.10
linux/linux_kernel 2.6.11
linux/linux_kernel 2.6.11.1
linux/linux_kernel 2.6.11.2
linux/linux_kernel 2.6.11.3
... and 40 more
Published Aug 14, 2009
Tracked Since Feb 18, 2026