CVE-2009-0834

CVE-2009-0834 is a low-severity vulnerability in Linux Linux Kernel with a CVSS 2.0 base score of 3.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.

Frequently asked questions

What is CVE-2009-0834?
The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
How severe is CVE-2009-0834?
CVE-2009-0834 has a CVSS 2.0 base score of 3.6, rated low severity.
Is CVE-2009-0834 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (35th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2009-0834?
CVE-2009-0834 primarily affects Linux Linux Kernel. In total, 20 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2009-0834?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2009-0834 published?
CVE-2009-0834 was published on 2009-03-06 and last updated on 2026-06-16.

References

Affected products (20)

More vulnerabilities in Linux Linux Kernel

All CVEs affecting Linux Linux Kernel →