Every CVESearch/Get API key

CVE-2009-4021

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2...

4.9 Medium

CVE-2009-4021 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published November 25, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.

What does this mean?
Severity
4.9 MediumCVSS 2.0, NVD
Exploit chance
0.41%EPSS, 35th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Exploit likelihood

0.41%Down 1.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:4.0
From an advisory covering 10 CVEs
before 2.6.18.dfsg.1-26etch2, plus listed versions
2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1
Show 33 moreShow less
2.6.18.dfsg.1-13etch22.6.18.dfsg.1-13etch32.6.18.dfsg.1-13etch42.6.18.dfsg.1-13etch52.6.18.dfsg.1-13etch62.6.18.dfsg.1-13lenny12.6.18.dfsg.1-142.6.18.dfsg.1-152.6.18.dfsg.1-162.6.18.dfsg.1-172.6.18.dfsg.1-17etch12.6.18.dfsg.1-182.6.18.dfsg.1-18etch12.6.18.dfsg.1-18etch32.6.18.dfsg.1-18etch42.6.18.dfsg.1-18etch52.6.18.dfsg.1-18etch62.6.18.dfsg.1-192.6.18.dfsg.1-202.6.18.dfsg.1-212.6.18.dfsg.1-222.6.18.dfsg.1-22etch12.6.18.dfsg.1-22etch22.6.18.dfsg.1-22etch32.6.18.dfsg.1-232.6.18.dfsg.1-23etch12.6.18.dfsg.1-242.6.18.dfsg.1-24etch12.6.18.dfsg.1-24etch22.6.18.dfsg.1-24etch32.6.18.dfsg.1-24etch42.6.18.dfsg.1-262.6.18.dfsg.1-26etch1
2.6.18.dfsg.1-26etch2
linux-2.6.24
Debian:4.0
From an advisory covering 18 CVEs
before 2.6.24-6~etchnhalf.9etch3, plus listed versions
2.6.24-5~etchnhalf.12.6.24-6~etchnhalf.12.6.24-6~etchnhalf.22.6.24-6~etchnhalf.32.6.24-6~etchnhalf.4
Show 10 moreShow less
2.6.24-6~etchnhalf.52.6.24-6~etchnhalf.62.6.24-6~etchnhalf.72.6.24-6~etchnhalf.82.6.24-6~etchnhalf.8etch12.6.24-6~etchnhalf.8etch22.6.24-6~etchnhalf.8etch32.6.24-6~etchnhalf.92.6.24-6~etchnhalf.9etch12.6.24-6~etchnhalf.9etch2
2.6.24-6~etchnhalf.9etch3
kernel-rt
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-debug
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-debuginfo-common
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-doc
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
Show 37 moreShow less
Affected packages
PackageAffectedFixed
kernel-rt-trace
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:1::el5
From an advisory covering 5 CVEs
before 0:2.6.24.7-146.el5rt
0:2.6.24.7-146.el5rt
kernel
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-PAE
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debug
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-xen
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::client
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debug
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-xen
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 11 CVEs
before 0:2.6.18-164.11.1.el5
0:2.6.18-164.11.1.el5

What each source reports

NVD Score used4.9

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Record
CVE-2009-4021
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Record
CVE-2009-4021
Updated
2026-11-02
EUVDEUVD-2009-3992No score

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Record
EUVD-2009-3992
Updated
2026-11-03
GitHub AdvisoriesGHSA-fc2m-v5px-4xvcNo score

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2...

The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.

Record
GHSA-fc2m-v5px-4xvc
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 93 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open