{"id":"CVE-2009-3888","aliases":["EUVD-2009-3859","GHSA-fxfp-pf9r-cm69"],"status":"published","title":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks...","description":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.","severity":{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00749,"percentile":0.55209,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-399"],"published":"2009-11-16T19:00:00Z","modified":"2026-06-16T23:12:34Z","exploits":[{"source":"exploitdb","id":"EDB-10017","title":"Linux Kernel 2.6.x - 'fput()' Null Pointer Dereference Local Denial of Service","type":"dos","platform":"linux","date":"2009-11-09","verified":true,"url":"https://www.exploit-db.com/exploits/10017"}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2009/11/13/3","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-864-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/09/2","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.6","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89a8640279f8bb78aaf778d1fc5c4a6778f18064","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3888"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=89a8640279f8bb78aaf778d1fc5c4a6778f18064"},{"url":"https://github.com/advisories/GHSA-fxfp-pf9r-cm69"}],"sources":{"cve":[{"id":"CVE-2009-3888","description":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.","status":"published","published":"2009-11-16T19:00:00Z","modified":"2024-08-07T06:45:50.603Z","updated_at":"2026-11-02T14:33:24.10565Z"}],"euvd":[{"id":"EUVD-2009-3859","description":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.","status":"published","published":"2009-11-16T19:00:00Z","modified":"2024-08-07T06:45:50Z","updated_at":"2026-11-03T01:39:12.280118Z"}],"ghsa":[{"id":"GHSA-fxfp-pf9r-cm69","title":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks...","description":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.","status":"published","published":"2022-05-02T03:49:43Z","modified":"2023-02-13T03:30:31Z","updated_at":"2026-11-02T14:54:05.992759Z"}],"nvd":[{"id":"CVE-2009-3888","description":"The do_mmap_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service (OOPS) via an application that attempts to allocate a large amount of memory.","status":"published","published":"2009-11-16T19:30:00.937Z","modified":"2026-06-16T23:12:34.69Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:01:37.939838Z"}]}}