CVE-2009-1184: Linux Kernel

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.

Affected products

• Linux Linux Kernel: version 2.2.27 only; version 2.4.36 only; version 2.4.36.1 only; version 2.4.36.2 only; version 2.4.36.3 only; version 2.4.36.4 only; …

Published 2009-05-05. Last modified 2026-06-16.