The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer…

Description

The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.

Scores

EPSS (exploitation in 30 days)

0.47% · top 59% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (17)

• RHSA-2009:1540 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 1022961 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• USN-852-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 38794 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2 (opens in a new tab)x_refsource_CONFIRMx_transferred
• oval:org.mitre.oval:def:10396 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• FEDORA-2009-9044 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• [oss-security] 20090726 Re: md raid null ptr dereference (when sysfs is writable) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 38834 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/ (opens in a new tab)x_refsource_MISCx_transferred
• kernel-mddriver-dos(52858) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• [oss-security] 20090724 md raid null ptr dereference (when sysfs is writable) (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 36501 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git%3Ba=commit%3Bh=3c92900d9a4afb176d3de335dc0da0198660a244 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 37105 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2010-0528 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-2849](https://trackcve.app/badge/CVE-2009-2849.svg)](https://trackcve.app/cve/CVE-2009-2849)

Record last updated 7 Aug 2024, 06:07 UTC.