CVE-2008-1375
MEDIUM severity · CVSS 6.9 · CWE-362
6.9CVSS MEDIUM
Summary
Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.
Impact & exploitability
Attack vectorLocal
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)0%
AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected products we track (2)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://marc.info/?l=linux-kernel&m=120967963803205&w=2 ↗
Additional information
- NVD record
- http://marc.info/?l=linux-kernel&m=120967963803205&w=2Patch
- http://marc.info/?l=linux-kernel&m=120967964303224&w=2Patch
- http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.htmlAdvisory
- http://lists.vmware.com/pipermail/security-announce/2008/000023.htmlAdvisory
- http://secunia.com/advisories/30017Advisory
- http://secunia.com/advisories/30018Advisory