cve/2009/CVE-2009-2698.md
2024-07-25 21:25:12 +00:00

3.1 KiB

CVE-2009-2698

Description

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

POC

Reference

Github