CVE-2009-0028

CVE-2009-0028 describes a vulnerability in Linux kernel versions 2.6.28 and earlier, where a local, unprivileged user can send arbitrary signals to a parent process. This is achieved by an unprivileged child process creating another child with the CLONE_PARENT flag and then exiting. The vulnerability has a low severity CVSS score (2.1) due to its local attack vector and limited impact, primarily leading to a denial of service (A:P). While there is an ExploitDB entry (EDB-32815) demonstrating local origin validation, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.