CVE-2009-3621: net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service...

Security readout for executives and security teams

This is a local Linux kernel denial-of-service flaw. A user already on the system could trigger a kernel deadlock in AF_UNIX socket handling and hang the machine. It is an availability risk for legacy, unpatched Linux systems, not a remote takeover issue based on the supplied sources. Exposure is most likely on unsupported or unpatched legacy Linux kernels and products that bundled affected kernels, including distributions or service-console environments cited by vendor advisories. The attacker needs local user access or an already-compromised local execution context. Treat this as a legacy availability cleanup item unless critical systems still run affected kernels. It should not outrank actively exploited remote flaws, but unpatched multi-user or shared-host systems deserve timely remediation because a local user could hang the host. Mitigation focus: Apply vendor kernel updates that include the AF_UNIX deadlock fix.; Prioritize internet-facing hosts where local users or hosted workloads can run code.; Check Red Hat, Ubuntu, SUSE, Mandriva, or VMware guidance for applicable packages..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.