CVE-2009-1897

CVE-2009-1897 is a local privilege escalation vulnerability affecting the Linux kernel versions 2.6.30 and 2.6.30.1. It stems from a NULL pointer dereference in the tun_chr_poll function within the tun subsystem, allowing local users to gain elevated privileges. The vulnerability has a CVSS score of 6.9, indicating high severity with local access and medium attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, exploit code is publicly available on ExploitDB, demonstrating its exploitability. There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.