AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1338

MEDIUM · CVSS 4.6 EPSS 0.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-04-22 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.6. It affects Linux.

CVE
CVE-2009-1338
Severity
MEDIUM
CVSS
4.6
EPSS
0.39%
Linux

Original NVD Description

The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.