CVE-2009-1184

CVE-2009-1184 describes a vulnerability in the SELinux subsystem of the Linux kernel (versions before 2.6.27.22 and 2.6.28.x before 2.6.28.10). When compat_net is enabled, the selinux_ip_postroute_iptables_compat function fails to perform necessary permission checks for network nodes and ports, allowing local users to bypass network traffic restrictions. This vulnerability has a CVSS score of 4.4, indicating a medium severity. It requires local access (AV:L) and moderate attack complexity (AC:M), potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, and no exploit code is publicly available through Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community attention, with no social media discussion or media coverage.