cve/cves/2009/CVE-2009-3547.md

CVE-2009-3547

Description

Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.

POC

Reference

No PoCs from references.

Github

• https://github.com/0b0111100/2009

ExploitDB

• https://www.exploit-db.com/exploits/33322
• https://www.exploit-db.com/exploits/33321
• https://www.exploit-db.com/exploits/10018
• https://www.exploit-db.com/exploits/9844
• https://www.exploit-db.com/exploits/40812

Collections

• https://github.com/helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2009/CVE-2009-3547