CVE-2009-2691

The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local...

2.1 LowFix available

The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.

Exploit likelihood

0.39%Down 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2009-2691
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-2691
Updated: 2026-11-02

EUVDEUVD-2009-2684 No score

Record: EUVD-2009-2684
Updated: 2026-11-03

GitHub AdvisoriesGHSA-274m-66j7-crv4 No score

The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local...

Record: GHSA-274m-66j7-crv4
Weakness: CWE-200
Updated: 2026-11-02

OSVBELL-CVE-2009-2691 2.1

CVE-2009-2691 does not affect BellSoft software

Record: BELL-CVE-2009-2691
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

Affected products

linux kernel

Affected packages

Affected packages
Package	Affected	Fixed
`linux-2.6.24` Debian:4.0	before 2.6.24-6~etchnhalf.9etch3, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 Show 10 moreShow less 2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.82.6.24-6~etchnhalf.8etch12.6.24-6~etchnhalf.8etch22.6.24-6~etchnhalf.8etch32.6.24-6~etchnhalf.92.6.24-6~etchnhalf.9etch12.6.24-6~etchnhalf.9etch2	2.6.24-6~etchnhalf.9etch3
`kernel-rt` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-debug` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-debug-debuginfo` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-debug-devel` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-debuginfo` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-debuginfo-common` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-devel` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-doc` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-trace` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt

Show 5 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-rt-trace-debuginfo` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-trace-devel` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-vanilla` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-vanilla-debuginfo` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt
`kernel-rt-vanilla-devel` Red Hat:enterprise_mrg:1::el5	before 0:2.6.24.7-137.el5rt	0:2.6.24.7-137.el5rt

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-2691 is a low vulnerability (CVSS 2.1) in Linux Kernel, published August 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in linux-2.6.24 2.6.24-6~etchnhalf.9etch3.

References

Show 76 moreShow less