vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2009-0029

N/A
Published: January 15, 2009 at 05:00 PM UTC
Updated: June 16, 2026 at 11:04 PM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (14)

Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
http://marc.info/?l=linux-kernel&m=123155111608910&w=2
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/33477
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/33674
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/34394
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/34981
Third Party Advisoryx_refsource_SECUNIA
Source: [email protected]
http://secunia.com/advisories/35011
Vendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2009/dsa-1749

CVSS

7.2HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card