CVE-2009-0834

Description

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

3.6

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.06%

Vendor Advisory mandriva.com Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory opensuse.org Vendor Advisory ubuntu.com Vendor Advisory opensuse.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/35390	third party advisory
http://www.securitytracker.com/id?1022153	vdb entry third party advisory
http://secunia.com/advisories/34962	third party advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:118	third party advisory vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html	mailing list third party advisory vendor advisory
http://secunia.com/advisories/37471	third party advisory
http://rhn.redhat.com/errata/RHSA-2009-0459.html	third party advisory vendor advisory
http://scary.beasts.org/security/CESA-2009-001.html	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49061	vdb entry third party advisory
http://www.vmware.com/security/advisories/VMSA-2009-0016.html	third party advisory
http://marc.info/?l=oss-security&m=123597642832637&w=2	third party advisory mailing list
http://www.debian.org/security/2009/dsa-1794	third party advisory vendor advisory
http://www.securityfocus.com/archive/1/503610/100/0/threaded	mailing list vdb entry third party advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html	mailing list third party advisory vendor advisory
http://www.ubuntu.com/usn/usn-751-1	third party advisory vendor advisory
http://secunia.com/advisories/35185	third party advisory
http://secunia.com/advisories/35015	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8508	vdb entry third party advisory signature
http://secunia.com/advisories/35011	third party advisory
http://www.securityfocus.com/archive/1/507985/100/0/threaded	mailing list vdb entry third party advisory
http://secunia.com/advisories/35120	third party advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html	mailing list third party advisory vendor advisory
http://secunia.com/advisories/34084	third party advisory
http://secunia.com/advisories/34981	third party advisory
http://www.debian.org/security/2009/dsa-1800	third party advisory vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9600	vdb entry third party advisory signature
http://secunia.com/advisories/34917	third party advisory
http://www.debian.org/security/2009/dsa-1787	third party advisory vendor advisory
http://marc.info/?l=linux-kernel&m=123579056530191&w=2	third party advisory mailing list
https://bugzilla.redhat.com/show_bug.cgi?id=487990	issue tracking third party advisory patch
http://rhn.redhat.com/errata/RHSA-2009-0473.html	third party advisory vendor advisory
http://wiki.rpath.com/Advisories:rPSA-2009-0084	broken link
http://www.redhat.com/support/errata/RHSA-2009-0451.html	third party advisory vendor advisory
http://marc.info/?l=linux-kernel&m=123579065130246&w=2	third party advisory mailing list
http://secunia.com/advisories/35121	third party advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccbe495caa5e604b04d5a31d7459a6f6a76a756c
http://www.vupen.com/english/advisories/2009/3316	vdb entry third party advisory
http://www.securityfocus.com/bid/33951	vdb entry third party advisory
http://secunia.com/advisories/35394	third party advisory

Frequently Asked Questions

What is the severity of CVE-2009-0834?: CVE-2009-0834 has been scored as a low severity vulnerability.
How to fix CVE-2009-0834?: To fix CVE-2009-0834, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2009-0834 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2009-0834 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.