CVE-2009-0835
Status: ModifiedLow (3.6)—Exploit
Severity3.6Low · CVSS 2.0
Exploitation probability0.93 %higher than 60% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
CVSS
- Base score
- 3.6
- Version
- 2.0
- Vector
- AV:L/AC:L/Au:N/C:P/I:P/A:N
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.93 %
- Percentile among all scored CVEs
- 60
- Score date
- 10/21/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · Linux Kernel 2.6.x - 'seccomp' System Call Security Bypass (3/2/2009)
Affected technologies (1)
CWEs
- CWE-264
References
Show 48 references
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
- http://lkml.org/lkml/2009/2/28/23
- http://marc.info/?l=linux-kernel&m=123579056530191&w=2
- http://marc.info/?l=linux-kernel&m=123579069630311&w=2
- http://marc.info/?l=oss-security&m=123597627132485&w=2
- http://scary.beasts.org/security/CESA-2009-001.html
- http://scary.beasts.org/security/CESA-2009-004.html
- http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html
- http://secunia.com/advisories/34084
- http://secunia.com/advisories/34786
- http://secunia.com/advisories/34917
- http://secunia.com/advisories/35121
- http://secunia.com/advisories/35185
- http://secunia.com/advisories/35390
- http://secunia.com/advisories/35394
- http://www.debian.org/security/2009/dsa-1800
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:118
- http://www.redhat.com/support/errata/RHSA-2009-0451.html
- http://www.securityfocus.com/bid/33948
- http://www.ubuntu.com/usn/usn-751-1
- https://bugzilla.redhat.com/show_bug.cgi?id=487255
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
- http://lkml.org/lkml/2009/2/28/23
- http://marc.info/?l=linux-kernel&m=123579056530191&w=2
- http://marc.info/?l=linux-kernel&m=123579069630311&w=2
- http://marc.info/?l=oss-security&m=123597627132485&w=2
- http://scary.beasts.org/security/CESA-2009-001.html
- http://scary.beasts.org/security/CESA-2009-004.html
- http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html
- http://secunia.com/advisories/34084
- http://secunia.com/advisories/34786
- http://secunia.com/advisories/34917
- http://secunia.com/advisories/35121
- http://secunia.com/advisories/35185
- http://secunia.com/advisories/35390
- http://secunia.com/advisories/35394
- http://www.debian.org/security/2009/dsa-1800
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:118
- http://www.redhat.com/support/errata/RHSA-2009-0451.html
- http://www.securityfocus.com/bid/33948
- http://www.ubuntu.com/usn/usn-751-1
- https://bugzilla.redhat.com/show_bug.cgi?id=487255
Raw JSON (NVD)
Show
{
"id": "CVE-2009-0835",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-03-06T11:30:02.657",
"references": [
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
"source": "cve@mitre.org"
},
{
"url": "http://lkml.org/lkml/2009/2/28/23",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=linux-kernel&m=123579056530191&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=linux-kernel&m=123579069630311&w=2",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=oss-security&m=123597627132485&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://scary.beasts.org/security/CESA-2009-001.html",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://scary.beasts.org/security/CESA-2009-004.html",
"source": "cve@mitre.org"
},
{
"url": "http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34084",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34786",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34917",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/35121",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/35185",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/35390",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/35394",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2009/dsa-1800",
"source": "cve@mitre.org"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/33948",
"source": "cve@mitre.org"
},
{
"url": "http://www.ubuntu.com/usn/usn-751-1",
"source": "cve@mitre.org"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=487255",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00007.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lkml.org/lkml/2009/2/28/23",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=linux-kernel&m=123579056530191&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=linux-kernel&m=123579069630311&w=2",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=oss-security&m=123597627132485&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://scary.beasts.org/security/CESA-2009-001.html",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://scary.beasts.org/security/CESA-2009-004.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/34084",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/34786",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/34917",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/35121",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/35185",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/35390",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/35394",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2009/dsa-1800",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:118",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2009-0451.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/33948",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/usn-751-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=487255",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343."
},
{
"lang": "es",
"value": "La función __secure_computing en kernel/seccomp.c en el subsistema seccomp en el núcleo de Linux v2.6.28.7 y versiones anteriores en la plataforma x86_64, cuando CONFIG_SECCOMP está activo, no maneja adecuadamente (1) un proceso de 32-bit haciendo una llamada al sistema (syscall) de 64-bit o (2) un proceso de 64-bit haciendo una llamada al sistema (syscall) de 32-bit, lo cual permite a usuarios locales evitar restricciones de acceso a través de llamadas al sistema (syscalls) manipuladsa que son malinterpretadas como (a) stat o (b) chmod, una cuestión distinta que CVE-2009-0342 y CVE-2009-0343."
}
],
"lastModified": "2026-06-16T23:05:54.700",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ED1BAE4-A6D3-49A1-BCAD-1E514D42F609"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F7C4DFF-616C-497D-9BAB-67C2E21BC21D"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6EBBFE8-2332-45CE-93F8-6815C2AE5D17"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "388414A1-C9B4-41BA-AD35-6501A463A095"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDBA01DD-C129-48F1-800B-838418F4A4A4"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "185F1EF8-04EB-43ED-B909-8BDF60F23E76"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9D4BCAD-B3CD-4FA1-A833-0D7D40289E07"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3483FAFA-353C-498F-AF68-8F5B84A0F30D"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3D5AEA5-210B-4E9F-8D9C-C25B84F15C75"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B11A9E1-9D90-46DC-81B5-17A137205AB3"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07EEC559-9240-46BE-9057-0F17D1F61F99"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBBC127F-D67E-43FE-BCFE-606C200084F4"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42B18945-EE09-4E6B-8C11-E382E5F8F850"
}
],
"operator": "OR"
}
]
}
],
"vendorComments": [
{
"comment": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.\n\nIt was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0451.html .",
"lastModified": "2009-05-19T00:00:00",
"organization": "Red Hat"
}
],
"sourceIdentifier": "cve@mitre.org"
}