Read the docs
TI-2009-02710 Aliases CVE-2009-2847GHSA-c85v-8h9f-3jwr

The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6…

Priority LOW 24Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · None · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.

Why it matters now

EPSS 0.00938 61st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed Red Hat: 4 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 80

CPEVersionsRoleVendor
cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:*2.6.24.7VulnerableLinux
cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:*2.6.25.15VulnerableLinux
cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:*up to 2.6.16.31VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*2.6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*2.6.0VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*2.6.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*2.6.10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*2.6.11VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*2.6.11.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*2.6.11.2VulnerableLinux
  • cpe:2.3:a:linux:kernel:2.6.24.7:*:*:*:*:*:*:* Versions 2.6.24.7 Vulnerable ·Linux
  • cpe:2.3:a:linux:kernel:2.6.25.15:*:*:*:*:*:*:* Versions 2.6.25.15 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:*:-rc5:*:*:*:*:*:* Versions up to 2.6.16.31 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* Versions 2.6.0 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:* Versions 2.6.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:* Versions 2.6.10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:* Versions 2.6.11 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:* Versions 2.6.11.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:* Versions 2.6.11.2 Vulnerable ·Linux
Show 70 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*2.6.11.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*2.6.11.4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*2.6.11.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*2.6.11.6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*2.6.11.7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*2.6.11.8VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*2.6.11.9VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*2.6.11.10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*2.6.11.11VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*2.6.11.12VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*2.6.12VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*2.6.12.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*2.6.12.2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*2.6.12.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*2.6.12.4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*2.6.12.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*2.6.12.6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*2.6.13VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*2.6.13.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*2.6.13.2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*2.6.13.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*2.6.13.4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*2.6.13.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*2.6.14VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*2.6.14.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*2.6.14.2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*2.6.14.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*2.6.14.4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*2.6.14.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*2.6.14.6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*2.6.14.7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*2.6.15VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*2.6.15.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*2.6.15.2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*2.6.15.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*2.6.15.4VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*2.6.15.5VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*2.6.15.6VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*2.6.15.7VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*2.6.16VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*2.6.16.1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*2.6.16.2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*2.6.16.3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*2.6.16.10VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*2.6.16.11VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*2.6.16.12VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*2.6.16.13VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*2.6.16.14VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*2.6.16.15VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*2.6.16.16VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*2.6.16.17VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*2.6.16.18VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*2.6.16.19VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*2.6.16.20VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*2.6.16.21VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*2.6.16.22VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*2.6.16.23VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*2.6.16.24VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*2.6.16.25VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*2.6.16.26VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*2.6.16.27VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*2.6.16.28VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*2.6.16.29VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*2.6.16.30VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*2.6.16.31VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*2.6.16.31 -rc1VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*2.6.16.31 -rc2VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*2.6.16.31 -rc3VulnerableLinux
cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*2.6.16.31 -rc4VulnerableLinux
cpe:2.3:h:linux:linux:*:*:x64:*:*:*:*:*all versionsRunning onLinux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:* Versions 2.6.11.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:* Versions 2.6.11.4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:* Versions 2.6.11.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:* Versions 2.6.11.6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:* Versions 2.6.11.7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:* Versions 2.6.11.8 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:* Versions 2.6.11.9 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:* Versions 2.6.11.10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:* Versions 2.6.11.11 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:* Versions 2.6.11.12 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:* Versions 2.6.12 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:* Versions 2.6.12.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:* Versions 2.6.12.2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:* Versions 2.6.12.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:* Versions 2.6.12.4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:* Versions 2.6.12.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:* Versions 2.6.12.6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:* Versions 2.6.13 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:* Versions 2.6.13.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:* Versions 2.6.13.2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:* Versions 2.6.13.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:* Versions 2.6.13.4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:* Versions 2.6.13.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:* Versions 2.6.14 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:* Versions 2.6.14.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:* Versions 2.6.14.2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:* Versions 2.6.14.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:* Versions 2.6.14.4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:* Versions 2.6.14.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:* Versions 2.6.14.6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:* Versions 2.6.14.7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:* Versions 2.6.15 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:* Versions 2.6.15.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:* Versions 2.6.15.2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:* Versions 2.6.15.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:* Versions 2.6.15.4 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:* Versions 2.6.15.5 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:* Versions 2.6.15.6 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:* Versions 2.6.15.7 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:* Versions 2.6.16 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:* Versions 2.6.16.1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:* Versions 2.6.16.2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:* Versions 2.6.16.3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:* Versions 2.6.16.10 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:* Versions 2.6.16.11 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:* Versions 2.6.16.12 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:* Versions 2.6.16.13 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:* Versions 2.6.16.14 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:* Versions 2.6.16.15 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:* Versions 2.6.16.16 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:* Versions 2.6.16.17 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:* Versions 2.6.16.18 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:* Versions 2.6.16.19 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:* Versions 2.6.16.20 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:* Versions 2.6.16.21 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:* Versions 2.6.16.22 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:* Versions 2.6.16.23 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:* Versions 2.6.16.24 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:* Versions 2.6.16.25 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:* Versions 2.6.16.26 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:* Versions 2.6.16.27 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:* Versions 2.6.16.28 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:* Versions 2.6.16.29 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:* Versions 2.6.16.30 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:* Versions 2.6.16.31 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:* Versions 2.6.16.31 -rc1 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:* Versions 2.6.16.31 -rc2 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:* Versions 2.6.16.31 -rc3 Vulnerable ·Linux
  • cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:* Versions 2.6.16.31 -rc4 Vulnerable ·Linux
  • cpe:2.3:h:linux:linux:*:*:x64:*:*:*:*:* Versions all versions Running on ·Linux

Remediation

Red Hat 4 advisories

  • RHSA-2009:1466 Released 2009-09-29 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux EUS (v. 5.3 server) kernel-2.6.18-128.8.1.el5, kernel-2.6.18-128.8.1.el5.ia64, kernel-PAE-2.6.18-128.8.1.el5 +18
  • RHSA-2009:1438 Released 2009-09-15 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux AS version 4 kernel-2.6.9-89.0.11.EL, kernel-2.6.9-89.0.11.EL.ia64, kernel-2.6.9-89.0.11.EL.ppc64iseries +14
    • Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-89.0.11.EL, kernel-devel-2.6.9-89.0.11.EL, kernel-doc-2.6.9-89.0.11.EL +8
    • Red Hat Enterprise Linux ES version 4 kernel-2.6.9-89.0.11.EL, kernel-2.6.9-89.0.11.EL.ia64, kernel-devel-2.6.9-89.0.11.EL +12
    • Red Hat Enterprise Linux WS version 4 kernel-2.6.9-89.0.11.EL, kernel-2.6.9-89.0.11.EL.ia64, kernel-devel-2.6.9-89.0.11.EL +12
  • RHSA-2009:1243 Released 2009-09-02 · Red Hat rating Important
    Red Hat Enterprise Linux 5.4 kernel security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-164.el5, kernel-2.6.18-164.el5.ia64, kernel-PAE-2.6.18-164.el5 +18
    • Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-164.el5, kernel-PAE-2.6.18-164.el5, kernel-PAE-devel-2.6.18-164.el5 +8
Show 1 more Red Hat advisories
  • RHSA-2009:1239 Released 2009-09-01 · Red Hat rating Important
    kernel-rt security and bug fix update
    • MRG Realtime for RHEL 5 Server kernel-rt-2.6.24.7-132.el5rt, kernel-rt-debug-2.6.24.7-132.el5rt, kernel-rt-debug-devel-2.6.24.7-132.el5rt +6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
MRG Realtime for RHEL 5 ServerFixed RHSA-2009:1239
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2009:1243
Red Hat Enterprise Linux AS version 4Fixed RHSA-2009:1438
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2009:1243
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2009:1438
Red Hat Enterprise Linux ES version 4Fixed RHSA-2009:1438
Red Hat Enterprise Linux EUS (v. 5.3 server)Fixed RHSA-2009:1466
Red Hat Enterprise Linux WS version 4Fixed RHSA-2009:1438

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2847
  2. 2026-10-03 Alias added: GHSA-c85v-8h9f-3jwr

References

Exploit 1

Patch 3

Advisory 4

Other 6

  • TI-2009-01318 Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in… CVSS 2.0HIGH 7.8
  • TI-2014-02132 Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers… CVSS 2.0HIGH 7.5
  • TI-2009-01322 Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel… CVSS 2.0HIGH 7.8
  • TI-2009-02708 cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before… CVSS 2.0HIGH 7.8
  • TI-2010-00296 The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in… CVSS 2.0MEDIUM 6.8
  • TI-2009-02633 The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before… CVSS 2.0HIGH 7.2
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences