CVE-2009-0028
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary...
2.1 LowPublic exploitFix available
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
Exploit likelihood
0.70%Down 3.3 points since Feb 4, 2022
What each source reports
NVD Score used
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
- Record
CVE-2009-0028- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
- Record
CVE-2009-0028- Updated
- 2026-11-02
EUVDEUVD-2009-0040 No score
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
- Record
EUVD-2009-0040- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvqj-x8r2-p6fr No score
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary...
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
- Record
GHSA-rvqj-x8r2-p6fr- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6.24Debian:4.0 |
before 2.6.24-6~etchnhalf.8etch1, plus listed versions 2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4 Show 4 moreShow less2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.8 |
2.6.24-6~etchnhalf.8etch1 |
linux-2.6Debian:4.0 |
before 2.6.18.dfsg.1-24etch2, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 Show 28 moreShow less2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch42.6.18.dfsg.1-18etch52.6.18.dfsg.1-18etch62.6.18.dfsg.1-192.6.18.dfsg.1-202.6.18.dfsg.1-212.6.18.dfsg.1-222.6.18.dfsg.1-22etch12.6.18.dfsg.1-22etch22.6.18.dfsg.1-22etch32.6.18.dfsg.1-232.6.18.dfsg.1-23etch12.6.18.dfsg.1-242.6.18.dfsg.1-24etch1 |
2.6.18.dfsg.1-24etch2 |
fai-kernelsDebian:4.0 |
before 1.17+etch.24etch2, plus listed versions 1.171.17+etch.13etch31.17+etch.13etch41.17+etch.13etch51.17+etch.13etch6 Show 22 moreShow less1.17+etch.161.17+etch.171.17+etch.17etch11.17+etch.18etch11.17+etch.18etch21.17+etch.18etch31.17+etch.18etch41.17+etch.18etch51.17+etch.18etch61.17+etch.211.17+etch.22etch11.17+etch.22etch21.17+etch.22etch31.17+etch.231.17+etch.23etch11.17+etch.241.17+etch11.17+etch21.17+etch31.17+etch41.17+etch51.17etch1 |
1.17+etch.24etch2 |
user-mode-linuxDebian:4.0 |
before 2.6.18-1um-2etch.24etch2, plus listed versions 2.6.18-1um-22.6.18-1um-2etch.13etch32.6.18-1um-2etch.13etch42.6.18-1um-2etch.13etch52.6.18-1um-2etch.13etch6 Show 20 moreShow less2.6.18-1um-2etch.162.6.18-1um-2etch.172.6.18-1um-2etch.17etch12.6.18-1um-2etch.18etch12.6.18-1um-2etch.18etch22.6.18-1um-2etch.18etch32.6.18-1um-2etch.18etch42.6.18-1um-2etch.18etch52.6.18-1um-2etch.18etch62.6.18-1um-2etch.212.6.18-1um-2etch.22etch12.6.18-1um-2etch.22etch22.6.18-1um-2etch.22etch32.6.18-1um-2etch.232.6.18-1um-2etch.23etch12.6.18-1um-2etch.242.6.18-1um-2etch12.6.18-1um-2etch22.6.18-1um-2etch32.6.18-1um-2etch4 |
2.6.18-1um-2etch.24etch2 |
linux-2.6Debian:5.0 |
before 2.6.26-15lenny2, plus listed versions 2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-152.6.26-15lenny12.6.26-15~bpo40+12.6.26-15~bpo40+2 |
2.6.26-15lenny2 |
user-mode-linuxDebian:5.0 |
before 2.6.26-1um-2+15lenny2, plus listed versions 2.6.26-1um-22.6.26-1um-2+15 |
2.6.26-1um-2+15lenny2 |
kernelRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
Show 91 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debugRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-headersRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-128.1.6.el5 | 0:2.6.18-128.1.6.el5 |
kernel-rtRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-debugRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-debuginfo-commonRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-docRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-traceRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:1::el5 |
before 0:2.6.24.7-111.el5rt | 0:2.6.24.7-111.el5rt |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenURed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenURed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenURed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.0.22.EL | 0:2.6.9-78.0.22.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - Cloned Process 'CLONE_PARENT' Local Origin Validation | 2009-02-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0028 is a low vulnerability (CVSS 2.1) in Linux Kernel, published February 27, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in linux-2.6.24 2.6.24-6~etchnhalf.8etch1.
References
secunia.com/advisories/35390
redhat.com/support/errata/RHSA-2009-0326.html
mandriva.com/security/advisories?name=MDVSA-2009:118
lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html
Show 113 moreShow less
rhn.redhat.com/errata/RHSA-2009-0459.html
vmware.com/security/advisories/VMSA-2009-0016.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11187
bugzilla.redhat.com/show_bug.cgi?id=479932
debian.org/security/2009/dsa-1794
securityfocus.com/archive/1/503610/100/0/threaded
ubuntu.com/usn/usn-751-1
scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-signal-vulnerability.html
osvdb.org/52204
wiki.rpath.com/Advisories:rPSA-2009-0084
vupen.com/english/advisories/2009/3316
scary.beasts.org/security/CESA-2009-002.html
nvd.nist.gov/vuln/detail/CVE-2009-0028
github.com/advisories/GHSA-rvqj-x8r2-p6fr
access.redhat.com/errata/RHSA-2009:0326
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0326.json
cve.org/CVERecord?id=CVE-2008-3528