CVE-2009-1883

The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.

• CWE-264

• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
• http://secunia.com/advisories/36759Vendor Advisory
• http://secunia.com/advisories/37105
• http://www.openwall.com/lists/oss-security/2009/09/15/1
• http://www.openwall.com/lists/oss-security/2009/09/15/3
• http://www.redhat.com/support/errata/RHSA-2009-1438.htmlVendor Advisory
• http://www.ubuntu.com/usn/USN-852-1
• https://bugzilla.redhat.com/show_bug.cgi?id=505983Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9513
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
• http://secunia.com/advisories/36759Vendor Advisory
• http://secunia.com/advisories/37105
• http://www.openwall.com/lists/oss-security/2009/09/15/1
• http://www.openwall.com/lists/oss-security/2009/09/15/3
• http://www.redhat.com/support/errata/RHSA-2009-1438.htmlVendor Advisory
• http://www.ubuntu.com/usn/USN-852-1
• https://bugzilla.redhat.com/show_bug.cgi?id=505983Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9513

Published

Sep 18, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1877Cross-site scripting (XSS) vulnerability in Adobe ColdFusion…
• CVE-2009-1878Session fixation vulnerability in Adobe ColdFusion 8.0.1 and…
• CVE-2009-1879Cross-site scripting (XSS) vulnerability in index.template.h…
• CVE-2009-1880Cross-site scripting (XSS) vulnerability in MT312 REP-BBS al…
• CVE-2009-1881Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS al…
• CVE-2009-1882Integer overflow in the XMakeImage function in magick/xwindo…
• CVE-2009-1884Off-by-one error in the bzinflate function in Bzip2.xs in th…
• CVE-2009-1885Stack consumption vulnerability in validators/DTD/DTDScanner…
• CVE-2009-1886Multiple format string vulnerabilities in client/client.c in…
• CVE-2009-1887agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Ent…
• CVE-2009-1888The acl_group_override function in smbd/posix_acls.c in smbd…
• CVE-2009-1889The OSCAR protocol implementation in Pidgin before 2.5.8 mis…