ID:9916 - Exploit for Use-after-free in Linux kernel - CVE-2009-4141

 
Main Vulnerability Database Exploits ID:9916 - Exploit for Use-after-free in Linux kernel - CVE-2009-4141

ID:9916 - Exploit for Use-after-free in Linux kernel - CVE-2009-4141

Published: June 5, 2024


Vulnerability identifier: #VU91078
Vulnerability risk: Low
CVE-ID: CVE-2009-4141
CWE-ID: CWE-416
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the fasync_helper() function in fs/fcntl.c. A local user can execute arbitrary code with elevated privileges.


Remediation

Install update from vendor's website.