CVE-2009-1337

CVE-2009-1337 describes a local privilege escalation vulnerability in the Linux kernel's exit_notify function (kernel/exit.c) affecting versions prior to 2.6.30-rc1. An attacker with CAP_KILL capability can manipulate the exit_signal field and then execute a setuid application to send arbitrary signals to processes. This vulnerability has a CVSS score of 4.4 (medium severity), indicating a local attack vector with medium complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While no active exploitation or Metasploit/Nuclei modules are noted, an exploit (EDB-8369) exists, and community discussion and media coverage are minimal.