Launchpad.net

CVE 2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

See the CVE page on Mitre.org for more details.