CVE-2009-0787: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an out-of-bounds read and allows local users to obtain portions of kernel memory.

Affected products

• Linux Linux Kernel: version 2.6.28 only; version 2.6.28.1 only; version 2.6.28.2 only; version 2.6.28.3 only; version 2.6.28.4 only; version 2.6.28.5 only; …

Published 2009-03-25. Last modified 2026-06-16.