CVE-2009-3547

CVE-2009-3547 describes multiple race conditions in the Linux kernel's pipe.c, affecting various Linux distributions including Canonical, Fedora, Red Hat, and SUSE. This vulnerability allows local users to cause a denial of service (system crash) or escalate privileges by manipulating anonymous pipes. Rated High (CVSS 7.0), it requires low privileges but high attack complexity, with potential for complete confidentiality, integrity, and availability compromise. While not on the CISA KEV catalog, multiple exploit proofs-of-concept are publicly available on ExploitDB, indicating its exploitability, though there is no evidence of active exploitation or significant community discussion.