{"id":"CVE-2009-2768","aliases":["BELL-CVE-2009-2768","EUVD-2009-2758","GHSA-79c6-w7w7-4c6q"],"status":"published","title":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux...","description":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\"","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00405,"percentile":0.35,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476","CWE-824"],"published":"2009-08-14T15:00:00Z","modified":"2026-06-16T23:10:10Z","products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://secunia.com/advisories/36278","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/08/13/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory"]},{"url":"http://lkml.org/lkml/2009/6/22/91","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52909","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:051","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Broken Link"]},{"url":"http://thread.gmane.org/gmane.linux.hardware.blackfin.kernel.devel/1905","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/36037","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc6","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3440625d78711bee41a84cf29c3d8c579b522666","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2768"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3440625d78711bee41a84cf29c3d8c579b522666"},{"url":"https://github.com/advisories/GHSA-79c6-w7w7-4c6q"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2009-2768","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-2768","description":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\"","status":"published","published":"2009-08-14T15:00:00Z","modified":"2024-08-07T05:59:57.153Z","updated_at":"2026-11-02T14:33:23.395558Z"}],"euvd":[{"id":"EUVD-2009-2758","description":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\"","status":"published","published":"2009-08-14T15:00:00Z","modified":"2024-08-07T05:59:57Z","updated_at":"2026-11-03T01:39:15.952935Z"}],"ghsa":[{"id":"GHSA-79c6-w7w7-4c6q","title":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux...","description":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\"","status":"published","published":"2022-05-02T03:38:24Z","modified":"2024-02-09T03:32:55Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:55:34.624515Z"}],"nvd":[{"id":"CVE-2009-2768","description":"The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by executing a shared flat binary, which triggers an access of an \"uninitialized cred pointer.\"","status":"published","published":"2009-08-14T15:16:27.657Z","modified":"2026-06-16T23:10:10.957Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-476","CWE-824"],"updated_at":"2026-11-02T14:01:36.200173Z"}],"osv":[{"id":"BELL-CVE-2009-2768","title":"CVE-2009-2768 does not affect BellSoft software","status":"withdrawn","published":"2009-08-14T15:16:00Z","modified":"2026-01-26T09:48:18.343532Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.886815Z"}]}}