{ "schema_version": "1.4.0", "id": "GHSA-xc37-2m2p-wghm", "modified": "2025-04-09T04:13:05Z", "published": "2022-05-02T03:39:17Z", "aliases": [ "CVE-2009-2849" ], "details": "The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to \"suspend_* sysfs attributes\" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2849" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52858" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10396" }, { "type": "WEB", "url": "https://rhn.redhat.com/errata/RHSA-2009-1540.html" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html" }, { "type": "WEB", "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244" }, { "type": "WEB", "url": "http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git;a=commit;h=3c92900d9a4afb176d3de335dc0da0198660a244" }, { "type": "WEB", "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/36501" }, { "type": "WEB", "url": "http://secunia.com/advisories/37105" }, { "type": "WEB", "url": "http://secunia.com/advisories/38794" }, { "type": "WEB", "url": "http://secunia.com/advisories/38834" }, { "type": "WEB", "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/07/24/1" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/07/26/1" }, { "type": "WEB", "url": "http://www.securitytracker.com/id?1022961" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-852-1" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/0528" }, { "type": "WEB", "url": "http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2009-08-18T21:00:00Z" } }