CVE-2009-2849: Linux Kernel

Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days.

The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.

Affected products

• Linux Linux Kernel: up to and including 2.6.30.1; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.3 only; version 2.6.4 only; …

Published 2009-08-18. Last modified 2026-06-16.