CVE-2009-2767: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of service (OOPS) or possibly gain privileges via a CLOCK_MONOTONIC_RAW clock_nanosleep call that triggers a NULL pointer dereference.

Affected products

• Linux Kernel: version 2.6.24.7 only; version 2.6.25.15 only
• Linux Linux Kernel: up to and including 2.6.16.31; version 2.6 only; version 2.6.0 only; version 2.6.1 only; version 2.6.10 only; version 2.6.11 only; …

Published 2009-08-14. Last modified 2026-06-16.