CVE-2009-1961
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
- Record
CVE-2009-1961- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-667
- Updated
- 2026-11-02
CVE List No score
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
- Record
CVE-2009-1961- Updated
- 2026-11-02
EUVDEUVD-2009-1956 No score
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
- Record
EUVD-2009-1956- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53cw-7857-2j7g
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
- Record
GHSA-53cw-7857-2j7g- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362, CWE-667
- Updated
- 2026-11-02
OSVBELL-CVE-2009-1961
CVE-2009-1961 does not affect BellSoft software
- Record
BELL-CVE-2009-1961- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6.24Debian:4.0 From an advisory covering 9 CVEs |
before 2.6.24-6~etchnhalf.8etch2, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 Show 5 moreShow less2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.82.6.24-6~etchnhalf.8etch1 |
2.6.24-6~etchnhalf.8etch2 |
kernel-rtRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 5 CVEs |
before 0:2.6.24.7-126.el5rt | 0:2.6.24.7-126.el5rt |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - 'splice(2)' Double Lock Local Denial of Service | 2009-05-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1961 is a medium vulnerability (CVSS 4.7) in Debian Linux, published June 6, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. No source names a fixed version.
References
secunia.com/advisories/35390
mandriva.com/security/advisories?name=MDVSA-2009:135
debian.org/security/2009/dsa-1844
securitytracker.com/id?1022307
Show 47 moreShow less
openwall.com/lists/oss-security/2009/06/02/2
redhat.com/support/errata/RHSA-2009-1157.html
lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17
ubuntu.com/usn/usn-793-1
securityfocus.com/bid/35143
nvd.nist.gov/vuln/detail/CVE-2009-1961
github.com/advisories/GHSA-53cw-7857-2j7g
docs.bell-sw.com/security/cves/CVE-2009-1961
access.redhat.com/errata/RHSA-2009:1157
bugzilla.redhat.com/show_bug.cgi?id=496572
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1157.json
cve.org/CVERecord?id=CVE-2009-1385