CVE Feed

Dashboard / CVE / CVE-2009-0269

CVE-2009-0269

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.

Published:Dec 22, 2008

Last Modified:Apr 23, 2026

EPS:Jan 26, 2009

EPSS Score:0.00157

CVSS Score:4.9

Affected Products

Vendor

Product

Action

Vendor

Canonical

Product

Ubuntu Linux

Canonical

Ubuntu Linux

Vendor

Debian

Product

Debian Linux

Debian

Debian Linux

Vendor

Linux

Product

Linux Kernel

Linux

Linux Kernel

Vendor

Opensuse

Product

Opensuse

Opensuse

Opensuse

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Enterprise Mrg

Redhat

Enterprise Mrg

Exploits

No exploit reference

Common Weakness Enumeration

CWE-787 Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

Related CVEs

CVE-2026-13476 (CVSS 7.3) — IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary co…

CVE-2026-13367 (CVSS 7.8) — IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit s…

CVE-2026-47337 (CVSS 3.3) — Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling …

CVE-2026-47336 (CVSS 3.3) — Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/A…

CVE-2026-47335 (CVSS 5.5) — Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor n…

CVE-2026-47334 (CVSS 5.5) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock…

CVE-2026-47333 (CVSS 7.8) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the si…

CVE-2026-47332 (CVSS 5.5) — Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an intern…

CVE-2026-47331 (CVSS 7.8) — Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An…

CVE-2026-47330 (CVSS 3.3) — Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an u…

References

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

http://secunia.com/advisories/33758

http://secunia.com/advisories/34394

http://secunia.com/advisories/34502

http://secunia.com/advisories/34981

http://secunia.com/advisories/35390

http://secunia.com/advisories/35394

http://secunia.com/advisories/37471

http://www.debian.org/security/2009/dsa-1749

http://www.debian.org/security/2009/dsa-1787

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1

http://www.mandriva.com/security/advisories?name=MDVSA-2009:118

http://www.redhat.com/support/errata/RHSA-2009-0326.html

http://www.redhat.com/support/errata/RHSA-2009-0360.html

http://www.securityfocus.com/archive/1/507985/100/0/threaded

http://www.securityfocus.com/bid/33412

http://www.ubuntu.com/usn/usn-751-1

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

http://www.vupen.com/english/advisories/2009/3316

https://exchange.xforce.ibmcloud.com/vulnerabilities/48188

https://lists.launchpad.net/ecryptfs-devel/msg00010.html

https://lists.launchpad.net/ecryptfs-devel/msg00011.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=a17d5232de7b53d34229de79ec22f4bb04adb7e4

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

http://secunia.com/advisories/33758

http://secunia.com/advisories/34394

http://secunia.com/advisories/34502

http://secunia.com/advisories/34981

http://secunia.com/advisories/35390

http://secunia.com/advisories/35394

http://secunia.com/advisories/37471

http://www.debian.org/security/2009/dsa-1749

http://www.debian.org/security/2009/dsa-1787

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.1

http://www.mandriva.com/security/advisories?name=MDVSA-2009:118

http://www.redhat.com/support/errata/RHSA-2009-0326.html

http://www.redhat.com/support/errata/RHSA-2009-0360.html

http://www.securityfocus.com/archive/1/507985/100/0/threaded

http://www.securityfocus.com/bid/33412

http://www.ubuntu.com/usn/usn-751-1

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

http://www.vupen.com/english/advisories/2009/3316

https://exchange.xforce.ibmcloud.com/vulnerabilities/48188

https://lists.launchpad.net/ecryptfs-devel/msg00010.html

https://lists.launchpad.net/ecryptfs-devel/msg00011.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8169

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8944

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High