CVE-2009-1883: Linux Kernel

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.

Affected products

• Linux Linux Kernel: version 2.6.9 only

Published 2009-09-18. Last modified 2026-06-16.