CVE-2009-1527

Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object.

• CWE-362

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb
• http://secunia.com/advisories/34977Broken Link
• http://secunia.com/advisories/35120Broken Link
• http://wiki.rpath.com/Advisories:rPSA-2009-0084Broken Link
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4Broken Link
• http://www.openwall.com/lists/oss-security/2009/05/04/2Mailing List, Third Party Advisory
• http://www.osvdb.org/54188Broken Link
• http://www.securityfocus.com/archive/1/503610/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/34799Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/1236Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50293Third Party Advisory, VDB Entry
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb
• http://secunia.com/advisories/34977Broken Link
• http://secunia.com/advisories/35120Broken Link
• http://wiki.rpath.com/Advisories:rPSA-2009-0084Broken Link
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4Broken Link
• http://www.openwall.com/lists/oss-security/2009/05/04/2Mailing List, Third Party Advisory
• http://www.osvdb.org/54188Broken Link
• http://www.securityfocus.com/archive/1/503610/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/34799Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/1236Not Applicable
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50293Third Party Advisory, VDB Entry

Published

May 5, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1521Unspecified vulnerability in the Java GUI in the IBM Tivoli …
• CVE-2009-1522The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through …
• CVE-2009-1523Directory traversal vulnerability in the HTTP server in Mort…
• CVE-2009-1524Cross-site scripting (XSS) vulnerability in Mort Bay Jetty b…
• CVE-2009-1525CMD_DB in JBMC Software DirectAdmin before 1.334 allows remo…
• CVE-2009-1526JBMC Software DirectAdmin before 1.334 allows local users to…
• CVE-2009-1528Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and S…
• CVE-2009-1529Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 …8.1
• CVE-2009-1530Use-after-free vulnerability in Microsoft Internet Explorer …
• CVE-2009-1531Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 …
• CVE-2009-1532Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 …8.8
• CVE-2009-1533Buffer overflow in the Works for Windows document converters…