CVE-2009-1184: The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in t...

Security readout for executives and security teams

CVE-2009-1184 is a legacy Linux kernel SELinux flaw. On systems using the affected kernel versions with compat_net enabled, a local user could bypass intended SELinux controls on some network traffic. This is not described as remote code execution, and the supplied sources do not show active exploitation. Exposure is most likely on legacy Linux systems running SELinux with compat_net enabled and kernels earlier than the fixed 2.6.27.22 or 2.6.28.10 releases. Modern supported distributions are unlikely to be affected unless they carry an old or custom kernel. Treat as a targeted legacy-risk item. It matters most where SELinux is relied on to constrain local users or services. Prioritize inventory and patch confirmation over emergency response unless affected legacy kernels are found in sensitive environments. Mitigation focus: Upgrade to a vendor kernel containing the SELinux fix.; Prioritize systems that rely on SELinux network policy enforcement.; Check relevant vendor advisories for distribution-specific fixed packages..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.