CVE-2009-0835
The MITRE CVE dictionary describes this issue as:
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
Find out more about CVE-2009-0835 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5.
It was addressed in Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-0451.html .
CVSS v2 metrics
| Base Score | 3.6 |
|---|---|
| Base Metrics | AV:L/AC:L/Au:N/C:P/I:P/A:N |
| Access Vector | Local |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | Partial |
| Availability Impact | None |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| MRG Grid for RHEL 5 Server (kernel-rt) | RHSA-2009:0451 | 2009-04-29 |
CVE description copyright © 2017, The MITRE Corporation