CVE-2009-1185
Fixed in a distro release EPSS 81%
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
Products: udev_project udev, suse linux_enterprise_debuginfo, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, debian_linux, canonical ubuntu_linux, fedoraproject fedora, juniper ctpview
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | py3-udev | no fix |
| Chainguard | py3.14-udev | no fix |
| Debian 4.0 | udev | 0.105-4etch1 |
| Debian 5.0 | udev | 0.125-7+lenny1 |
| Red Hat Enterprise Linux 5 | libvolume_id | 0:095-14.20.el5_3 |
| Red Hat Enterprise Linux 5 | libvolume_id-devel | 0:095-14.20.el5_3 |
| Red Hat Enterprise Linux 5 | udev | 0:095-14.20.el5_3 |
| Red Hat Enterprise Linux 5 | udev-debuginfo | 0:095-14.20.el5_3 |
| Wolfi | py3-udev | no fix |
| Wolfi | py3.14-udev | no fix |