CVE-2009-2584

Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow.

• CWE-189

• http://grsecurity.net/~spender/exploit_demo.cExploit, Third Party Advisory
• http://lkml.org/lkml/2009/7/20/348Exploit, Mailing List, Third Party Advisory
• http://lkml.org/lkml/2009/7/20/362Mailing List, Third Party Advisory
• http://secunia.com/advisories/37105Third Party Advisory
• http://www.securityfocus.com/bid/35753Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-852-1Third Party Advisory
• http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/Exploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51887Third Party Advisory, VDB Entry
• http://grsecurity.net/~spender/exploit_demo.cExploit, Third Party Advisory
• http://lkml.org/lkml/2009/7/20/348Exploit, Mailing List, Third Party Advisory
• http://lkml.org/lkml/2009/7/20/362Mailing List, Third Party Advisory
• http://secunia.com/advisories/37105Third Party Advisory
• http://www.securityfocus.com/bid/35753Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-852-1Third Party Advisory
• http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/Exploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51887Third Party Advisory, VDB Entry

Published

Jul 23, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2578Google Chrome 2.x through 2.0.172 allows remote attackers to…
• CVE-2009-2579SQL injection vulnerability in reward_points.post.php in the…
• CVE-2009-2580Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-2581Cross-site scripting (XSS) vulnerability in modifier.php in …
• CVE-2009-2582Stack-based buffer overflow in manager.exe in Akamai Downloa…
• CVE-2009-2583Multiple session fixation vulnerabilities in IBM Tivoli Iden…
• CVE-2009-2585SQL injection vulnerability in index.php in Mlffat 2.2 allow…
• CVE-2009-2586Cross-site scripting (XSS) vulnerability in articles.php in …
• CVE-2009-2587Multiple cross-site scripting (XSS) vulnerabilities in DragD…
• CVE-2009-2588Multiple cross-site scripting (XSS) vulnerabilities in Hotsc…
• CVE-2009-2589Multiple cross-site scripting (XSS) vulnerabilities in Hutsc…
• CVE-2009-2590SQL injection vulnerability in showcategory.php in Hutscript…