CVE-2009-2584

Publication date 23 July 2009

Last updated 24 July 2024

Ubuntu priority

Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	9.04 jaunty	Fixed 2.6.28-16.55
	8.10 intrepid	Fixed 2.6.27-15.43
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Not in release
linux-source-2.6.15	9.04 jaunty	Not in release
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not affected

Notes

mdeslaur

may only be vulnerable on particular SGI hardware PoC: http://grsecurity.net/~spender/exploit_demo.c

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Introduced by 1da177e, fixed by d39b7dd

References

Related Ubuntu Security Notices (USN)