Every CVE Search/ Get API key

CVE-2009-1072

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...

4.9 MediumFix available

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

Exploit likelihood

0.43%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.9

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

Record
CVE-2009-1072
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:C/A:N
Weakness
CWE-16
Updated
2026-11-02
CVE List No score

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

Record
CVE-2009-1072
Updated
2026-11-02
EUVDEUVD-2009-1073 No score

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

Record
EUVD-2009-1073
Updated
2026-11-03
GitHub AdvisoriesGHSA-pxr6-gr2r-cc6x No score

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.

Record
GHSA-pxr6-gr2r-cc6x
Updated
2026-11-02
OSVBELL-CVE-2009-1072 4.9

CVE-2009-1072 does not affect BellSoft software

Record
BELL-CVE-2009-1072
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:C/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:5.0
 before 2.6.26-15lenny2, plus listed versions
2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-152.6.26-15lenny12.6.26-15~bpo40+12.6.26-15~bpo40+2
2.6.26-15lenny2
user-mode-linux
Debian:5.0
 before 2.6.26-1um-2+15lenny2, plus listed versions
2.6.26-1um-22.6.26-1um-2+15
2.6.26-1um-2+15lenny2
kernel-rt
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-debug
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-debuginfo-common
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-doc
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
Show 87 moreShow less
Affected packages
PackageAffectedFixed
kernel-rt-trace
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:1::el5
 before 0:2.6.24.7-117.el5rt
0:2.6.24.7-117.el5rt
kernel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debug
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-doc
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-headers
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-xen
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debug
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-doc
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-headers
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-xen
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
 before 0:2.6.18-128.1.14.el5
0:2.6.18-128.1.14.el5
kernel
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU-devel
Red Hat:enterprise_linux:4::as
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU-devel
Red Hat:enterprise_linux:4::es
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-doc
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-largesmp-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL
kernel-xenU-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.6.9-89.0.3.EL
0:2.6.9-89.0.3.EL

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-1072 is a medium vulnerability (CVSS 4.9) in Debian Linux, published March 25, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 36th percentile. Fixed in linux-2.6 2.6.26-15lenny2.

References

Show 91 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open