CVE-2009-4895

Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions. NOTE: the vulnerability was addressed in a different way in 2.6.32.9.

• CWE-362
• CWE-476

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116Broken Link
• http://www.debian.org/security/2010/dsa-2094Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6Broken Link
• http://www.openwall.com/lists/oss-security/2010/06/15/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/06/15/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/06/15/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/06/15/5Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=14605Issue Tracking, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=559100Issue Tracking, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=703625118069f9f8960d356676662d3db5a9d116Broken Link
• http://www.debian.org/security/2010/dsa-2094Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.6Broken Link
• http://www.openwall.com/lists/oss-security/2010/06/15/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/06/15/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/06/15/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/06/15/5Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-1000-1Third Party Advisory
• https://bugzilla.kernel.org/show_bug.cgi?id=14605Issue Tracking, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=559100Issue Tracking, Third Party Advisory

Published

Sep 8, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4889SQL injection vulnerability in books.php in the Book Panel (…
• CVE-2009-4890Multiple cross-site scripting (XSS) vulnerabilities in the l…
• CVE-2009-4891SQL injection vulnerability in index.php in CS-Cart 2.0.0 Be…
• CVE-2009-4892SQL injection vulnerability in Content Management System WEB…
• CVE-2009-4893Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when …
• CVE-2009-4894Multiple cross-site scripting (XSS) vulnerabilities in profi…
• CVE-2009-4896Multiple directory traversal vulnerabilities in the mlmmj-ph…
• CVE-2009-4897Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and ea…
• CVE-2009-4898Cross-site request forgery (CSRF) vulnerability in TWiki bef…
• CVE-2009-4899pixelpost 1.7.1 has SQL injection9.8
• CVE-2009-4900pixelpost 1.7.1 has XSS6.1
• CVE-2009-4901The MSGFunctionDemarshall function in winscard_svc.c in the …