CVE-2009-4410

Linux Kernel 2.6.29-rc1-2.6.30.y - Denial of Service via FUSE ioctl Handler

Title source: llm
STIX 2.1

Description

The fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows local users to cause a denial of service (panic) via unknown vectors.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37453
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=549400
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37928
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/12/23/1
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/61335

Scores

EPSS 0.0036
EPSS Percentile 29.2%

Details

Status published
Products (21)
linux/linux_kernel 2.6.29 (6 CPE variants)
linux/linux_kernel 2.6.29.1
linux/linux_kernel 2.6.29.2
linux/linux_kernel 2.6.29.3
linux/linux_kernel 2.6.29.4
linux/linux_kernel 2.6.29.5
linux/linux_kernel 2.6.29.6
linux/linux_kernel 2.6.29.rc1
linux/linux_kernel 2.6.29.rc2
linux/linux_kernel 2.6.29.rc2-git1
... and 11 more
Published Dec 24, 2009
Tracked Since Feb 18, 2026