CVE-2009-1041

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-03-26 · updated 2026-06-16
Weakness: CWE-119

Description

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.

Affected products

FreeBSD: 7.0, 7.0-pre-release, 7.0-release, 7.0-release-p8, 7.0-release-p9, 7.0-releng (+7)

References

http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc
http://www.securityfocus.com/bid/34196
http://www.securitytracker.com/id?1021882
https://exchange.xforce.ibmcloud.com/vulnerabilities/49362
https://www.exploit-db.com/exploits/8261
http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc
http://www.securityfocus.com/bid/34196
http://www.securitytracker.com/id?1021882
https://exchange.xforce.ibmcloud.com/vulnerabilities/49362
https://www.exploit-db.com/exploits/8261

Get alerted when CVE-2009-1041 or the next vulnerability affects your stack