Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 8 products
@TheHackersNews SSHStalker’s silent persistence via legacy kernel flaws should terrify every Linux admin. My cats could exploit CVE-2009-2692 at this point.
Post summary
The tweet vaguely mentions CVE‑2009‑2692 and warns of potential exploitation, but provides no technical details, exploit code, patch, or evidence of active attacks.
12 of 12 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 4.0 | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | redhat | enterprise_linux_desktop | 4.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 5.0 | - | - |
| OS | redhat | enterprise_linux_eus | 4.8 | - | - |
| OS | redhat | enterprise_linux_eus | 5.3 | - | - |
| OS | redhat | enterprise_linux_server | 4.0 | - | - |
| OS | redhat | enterprise_linux_server | 5.0 | - | - |
| OS | redhat | enterprise_linux_server_aus | 5.3 | - | - |
| OS | redhat | enterprise_linux_workstation | 4.0 | - | - |
| OS | redhat | enterprise_linux_workstation | 5.0 | - | - |
| OS | suse | linux_enterprise_real_time | 10 | - | - |