Description
The Linux kernel 2.6.9 through 2.6.17 on the x86_64 and amd64 platforms allows local users to cause a denial of service (panic) via a 32-bit application that calls mprotect on its Virtual Dynamic Shared Object (VDSO) page and then triggers a segmentation fault.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +10 | 2.6.9-89.0.23.EL | RHSA-2010:0146 |
Advisories 1
- RHSA-2010:0146 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=548876
- RHSA-2010:0146 vendor-advisory
- [oss-security] 20100317 CVE-2009-4271 kernel: 32bit process on 64bit system DoS mailing-list
- oval:org.mitre.oval:def:10248 vdb-entry signature