● CVE
CVE-2009-1072
Vendordebian, suse, linux, canonical, opensuseProductdebian linux, linux enterprise desktop, linux enterprise server, linux kernel, ubuntu linux, opensuse, vcenter server, esx, server, virtualcenter, vmaDiscoveredMar 25, 2009UpdatedApr 23, 2026
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.