CVE-2009-1046: The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier vers...

Security readout for executives and security teams

CVE-2009-1046 is an old Linux kernel console bug that can corrupt memory and cause denial of service when UTF-8 console text is selected locally. The known scenario requires physical proximity to the console. Sources do not confirm active exploitation or whether it crosses privilege boundaries. Exposure is most plausible on legacy Linux systems with affected 2.6-era kernels and accessible physical or virtual consoles using UTF-8. Modern systems are unlikely to be exposed unless running unpatched historical kernels or vendor backports missing the fix. Treat this as a legacy hardening issue, not an internet-scale emergency. Patch or retire affected systems, especially where untrusted users can access a console. Business urgency rises for shared facilities, labs, kiosks, and operational systems still running old kernels. Mitigation focus: Upgrade affected kernels to a vendor-fixed release or Linux 2.6.28.4 or later.; Apply relevant distribution security updates from Ubuntu, Debian, or Red Hat where applicable.; Prioritize systems with shared, kiosk, lab, or remotely exposed console access..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.