Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2009-2698

38
FAUCET Score

CVE-2009-2698 describes a local privilege escalation or denial-of-service vulnerability in the Linux kernel versions prior to 2.6.19, affecting the udp_sendmsg function in both IPv4 and IPv6 UDP implementations. This flaw impacts various distributions including Canonical, Fedora, Red Hat, SUSE, and VMware. With a CVSS score of 7.8 (High), it allows a local attacker to achieve high impact on confidentiality, integrity, and availability through a NULL pointer dereference by manipulating the MSG_MORE flag on a UDP socket. While not on the KEV catalog or Hot List, publicly available exploit code exists on ExploitDB, indicating its exploitability, despite a lack of broader community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.6.19CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.06CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
8.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
8.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
9.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
7.12%
Probability of exploitation in next 30 days
EPSS Percentile
93.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-9575 · Sep 2, 2009
This CVE's current EPSS score of 0.0712 is in the 99th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: kernel-0:2.4.21-60.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: kernel-0:2.6.9-89.0.9.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4.7 Z StreamFixed in: kernel-0:2.6.9-78.0.27.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel-0:2.6.18-128.7.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.2 Z StreamFixed in: kernel-0:2.6.18-92.1.28.el5
View patch

Vendor Advisories (1)

redhatCVE-2009-2698Important

kernel: udp socket NULL ptr dereference

Aug 24, 2009

References

git.kernel.org
Broken Link
lists.opensuse.org / opensuse-security-announce/2009-08/msg00008.html
Mailing ListThird Party Advisory
rhn.redhat.com / errata/RHSA-2009-1222.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2009-1223.html
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
secunia.com / advisories/23073
Broken LinkVendor Advisory
secunia.com / advisories/36430
Broken LinkVendor Advisory
secunia.com / advisories/36510
Broken LinkVendor Advisory
secunia.com / advisories/37105
Broken LinkVendor Advisory
secunia.com / advisories/37298
Broken LinkVendor Advisory
secunia.com / advisories/37471
Broken LinkVendor Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514
Broken LinkThird Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557
Broken LinkThird Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142
Broken LinkThird Party Advisory
support.avaya.com / css/P8/documents/100067254
Third Party Advisory
kernel.org / pub/linux/kernel/v2.6/ChangeLog-2.6.19
Broken LinkVendor Advisory
mandriva.com / security/advisories
Broken LinkThird Party Advisory
openwall.com / lists/oss-security/2009/08/25/1
Mailing List
redhat.com / support/errata/RHSA-2009-1233.html
Broken LinkThird Party Advisory
securityfocus.com / archive/1/507985/100/0/threaded
Broken LinkThird Party AdvisoryVDB Entry
securityfocus.com / archive/1/512019/100/0/threaded
Broken LinkThird Party AdvisoryVDB Entry
securityfocus.com / bid/36108
Broken LinkExploitPatchThird Party AdvisoryVDB Entry
securitytracker.com / id
Broken LinkThird Party AdvisoryVDB Entry
ubuntu.com / usn/USN-852-1
Third Party Advisory
vmware.com / security/advisories/VMSA-2009-0016.html
Third Party Advisory
vupen.com / english/advisories/2009/3316
Permissions Required