CVE-2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK…

published April 17, 2009

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS

—

EPSS

81%

Percentile

99.6

In the wild

Unconfirmed

What it is

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.80550 · 99.6th percentile
Published: 2009-04-17T14:00Z

EPSS history

Timeline

17 APR 14:00Z
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK…
cvelistv5