CVE-2009-3288: Kernel Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD. NOTE: this is only exploitable by users who can open the cdrom device.

Affected products

• Kernel Linux Kernel: version 2.6.28-rc1 only
• Linux Linux Kernel: version 2.6.31-rc2 only; version 2.6.31-rc3 only; version 2.6.31-rc4 only; version 2.6.31-rc5 only; version 2.6.31-rc6 only; version 2.6.31-rc7 only; …

Published 2009-09-22. Last modified 2026-06-16.