CVE-2009-0029: Debian Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The ABI in the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms requires that a 32-bit argument in a 64-bit register was properly sign extended when sent from a user-mode application, but cannot verify this, which allows local users to cause a denial of service (crash) or possibly gain privileges via a crafted system call.

Affected products

• Debian Debian Linux: version 4.0 only; version 5.0 only
• Linux Linux Kernel: up to and including 2.6.28

Published 2009-01-15. Last modified 2026-06-16.