systemtap: race condition leads to privilege escalation

🗓️ 26 Mar 2009 16:00:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

SystemTap tool race condition lets stapusr group users insert kernel modules and gain privileges.

Reporter	Title	Published	Views	Family All 48
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i386	systemtap	0:0.6.2-2.el4_7	systemtap-0:0.6.2-2.el4_7.i386.rpm
Red Hat Enterprise Linux	4	ia64	systemtap	0:0.6.2-2.el4_7	systemtap-0:0.6.2-2.el4_7.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	systemtap	0:0.6.2-2.el4_7	systemtap-0:0.6.2-2.el4_7.ppc64.rpm
Red Hat Enterprise Linux	4	x86_64	systemtap	0:0.6.2-2.el4_7	systemtap-0:0.6.2-2.el4_7.x86_64.rpm
Red Hat Enterprise Linux	5	i386	systemtap	0:0.7.2-3.el5_3	systemtap-0:0.7.2-3.el5_3.i386.rpm
Red Hat Enterprise Linux	5	ia64	systemtap	0:0.7.2-3.el5_3	systemtap-0:0.7.2-3.el5_3.ia64.rpm
Red Hat Enterprise Linux	5	ppc64	systemtap	0:0.7.2-3.el5_3	systemtap-0:0.7.2-3.el5_3.ppc64.rpm
Red Hat Enterprise Linux	5	s390x	systemtap	0:0.7.2-3.el5_3	systemtap-0:0.7.2-3.el5_3.s390x.rpm
Red Hat Enterprise Linux	5	x86_64	systemtap	0:0.7.2-3.el5_3	systemtap-0:0.7.2-3.el5_3.x86_64.rpm
Red Hat Enterprise Linux	5	i386	systemtap-client	0:0.7.2-3.el5_3	systemtap-client-0:0.7.2-3.el5_3.i386.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2009-0784
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-0784
cve	www.cve.org/CVERecord

25 Jun 2026 10:35Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.3

EPSS0.00257

systemtap race condition privilege escalation local users stapusr group kernel modules