udev provides a user-space API and implements a dynamic device directory,providing only the devices present on the system. udev replaces devfs inorder to provide greater hot plug functionality. Netlink is a datagramoriented service, used to transfer information between kernel modules anduser-space processes.It was discovered that udev did not properly check the origin of Netlinkmessages. A local attacker could use this flaw to gain root privileges viaa crafted Netlink message sent to udev, causing it to create aworld-writable block device file for an existing system block device (forexample, the root file system). (CVE-2009-1185)Red Hat would like to thank Sebastian Krahmer of the SUSE Security Team forresponsibly reporting this flaw.Users of udev are advised to upgrade to these updated packages, whichcontain a backported patch to correct this issue. After installing theupdate, the udevd daemon will be restarted automatically.