CVE-2009-2698

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Date published : 2009-08-27

http://www.securityfocus.com/bid/36108

http://www.securityfocus.com/archive/1/507985/100/0/threaded