CVE-2009-1185

CVE-2009-1185 describes a local privilege escalation vulnerability in udev versions prior to 1.4.1, affecting various Linux distributions including Debian, Ubuntu, Fedora, and openSUSE. The flaw stems from udev's failure to verify the origin of NETLINK messages, allowing a local attacker to send malicious messages from user space to gain root privileges. With a CVSS score of 7.2 and an EPSS score indicating high exploitability, this vulnerability poses a significant risk. Exploit code is publicly available through Metasploit and ExploitDB, demonstrating its ease of exploitation, though there is no evidence of active exploitation in the wild or significant community discussion.