Files
cve/2009/CVE-2009-2698.md
2025-09-29 21:09:30 +02:00

3.8 KiB

CVE-2009-2698

Description

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

POC

Reference

Github