CVE-2009-3547: Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a de...

Security readout for executives and security teams

CVE-2009-3547 is an old Linux kernel flaw where a local user could trigger a system crash or possibly gain higher privileges. It affects kernel code before 2.6.32-rc6 and was addressed by upstream and multiple vendor advisories. Internet-facing exposure is not indicated; the risk is from users or workloads already able to run locally. Exposure is most likely on legacy Linux systems or appliances running kernels before 2.6.32-rc6, including vendor-packaged kernels covered by the cited Red Hat, Ubuntu, SUSE, Mandriva, and VMware advisories. Modern maintained kernels are unlikely to be affected, but embedded or long-lived systems should be checked. Treat this as a legacy-platform hygiene issue with potentially high impact where affected systems still exist. It is not presented as remotely exploitable, but vulnerable multi-user or compromised systems could be crashed or escalated. Patch or retire affected kernels during the next prioritized maintenance cycle. Mitigation focus: Apply the relevant vendor kernel security update for affected systems.; Upgrade kernels to a fixed vendor build or upstream 2.6.32-rc6 or later.; Prioritize legacy servers, virtualization service consoles, and appliances with local users..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.