CVE-2009-1243: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the "udp seq_file infrastructure."

Affected products

• Linux Linux Kernel: before 2.6.29.1 (fixed in 2.6.29.1)

Published 2009-04-06. Last modified 2026-06-16.