{"id":"CVE-2009-2691","aliases":["BELL-CVE-2009-2691","DSA-2005-1","EUVD-2009-2684","GHSA-274m-66j7-crv4","RHSA-2009:1540"],"status":"published","title":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local...","description":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00393,"percentile":0.33788,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2009-08-14T15:00:00Z","modified":"2026-06-29T10:02:35Z","affected":[{"source":"osv","ecosystem":"Debian:4.0","package":"linux-2.6.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.24-6~etchnhalf.9etch3"}]}],"versions":["2.6.24-5~etchnhalf.1","2.6.24-6~etchnhalf.1","2.6.24-6~etchnhalf.2","2.6.24-6~etchnhalf.3","2.6.24-6~etchnhalf.4","2.6.24-6~etchnhalf.5","2.6.24-6~etchnhalf.6","2.6.24-6~etchnhalf.7","2.6.24-6~etchnhalf.8","2.6.24-6~etchnhalf.8etch1","2.6.24-6~etchnhalf.8etch2","2.6.24-6~etchnhalf.8etch3","2.6.24-6~etchnhalf.9","2.6.24-6~etchnhalf.9etch1","2.6.24-6~etchnhalf.9etch2"],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-trace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-trace-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-vanilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-vanilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"kernel-rt-vanilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.24.7-137.el5rt"}]}],"bundled":12}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://lkml.org/lkml/2009/6/23/653","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/36265","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://lkml.org/lkml/2009/6/23/652","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516171","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1540.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/36019","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=00f89d218523b9bf6b522349c039d5ac80aa536d","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=704b836cbf19e885f8366bccb2e4b0474346c02d","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/11/1","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=124718946021193","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/2246","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13f0feafa6b8aead57a2a328e2fca6a5828bf286","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/36501","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.debian.org/security/2010/dsa-2005","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52401","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://marc.info/?l=linux-kernel\u0026m=124718949821250","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2691","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=00f89d218523b9bf6b522349c039d5ac80aa536d"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13f0feafa6b8aead57a2a328e2fca6a5828bf286"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=704b836cbf19e885f8366bccb2e4b0474346c02d"},{"url":"https://github.com/advisories/GHSA-274m-66j7-crv4"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2009-2691","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1540","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-18042","tags":["article"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-17866","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=530490","tags":["report"]},{"url":"http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=522503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529137","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1540.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1895","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1895","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2691","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2695","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2695","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2849","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2849","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2849","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2910","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2910","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3002","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3002","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3228","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3612","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3612","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3613","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3613","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3620","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3621","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-2691","description":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.","status":"published","published":"2009-08-14T15:00:00Z","modified":"2024-08-07T05:59:56.971Z","updated_at":"2026-11-02T14:33:23.395558Z"}],"euvd":[{"id":"EUVD-2009-2684","description":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.","status":"published","published":"2009-08-14T15:00:00Z","modified":"2024-08-07T05:59:56Z","updated_at":"2026-11-03T01:39:16.555521Z"}],"ghsa":[{"id":"GHSA-274m-66j7-crv4","title":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local...","description":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.","status":"published","published":"2022-05-02T03:37:44Z","modified":"2025-04-09T04:14:01Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:00.53445Z"}],"nvd":[{"id":"CVE-2009-2691","description":"The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.","status":"published","published":"2009-08-14T15:16:27.467Z","modified":"2026-06-16T23:10:01.523Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:36.200173Z"}],"osv":[{"id":"BELL-CVE-2009-2691","title":"CVE-2009-2691 does not affect BellSoft software","status":"withdrawn","published":"2009-08-14T15:16:00Z","modified":"2026-01-28T07:22:10.35976Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:12.886815Z"},{"id":"DSA-2005-1","title":"linux-2.6.24 - several vulnerabilities","status":"published","published":"2010-02-27T00:00:00Z","modified":"2026-03-09T01:19:53.725659Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2009:1540","title":"Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T06:45:46Z","modified":"2026-06-29T10:02:35Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}