CVE-2009-2584

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-07-23 · updated 2026-06-16
Weakness: CWE-189

Description

Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which triggers a stack-based buffer overflow.

Affected products

Linux kernel: through 2.6.30.2

References

http://grsecurity.net/~spender/exploit_demo.c
http://lkml.org/lkml/2009/7/20/348
http://lkml.org/lkml/2009/7/20/362
http://secunia.com/advisories/37105
http://www.securityfocus.com/bid/35753
http://www.ubuntu.com/usn/USN-852-1
http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/
https://exchange.xforce.ibmcloud.com/vulnerabilities/51887
http://grsecurity.net/~spender/exploit_demo.c
http://lkml.org/lkml/2009/7/20/348
http://lkml.org/lkml/2009/7/20/362
http://secunia.com/advisories/37105

Get alerted when CVE-2009-2584 or the next vulnerability affects your stack