CVE-2009-2793

CVE-2009-2793 describes a privilege escalation vulnerability in the NetBSD kernel, specifically affecting versions likely 5.0.1 and earlier on x86 platforms. This flaw stems from improper handling of a pre-commit failure in the iret instruction, allowing a local attacker to gain elevated privileges. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), it indicates low attack complexity and local access requirements, potentially leading to compromise of confidentiality, integrity, and availability. While not actively exploited in the wild or on the KEV catalog, an exploit (EDB-33229) exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.