Lucene search
HistoryNov 21, 2008 - 2:30 a.m.
CVE-2008-5182
cve-2008-5182
linux kernel
inotify
privilege escalation
race conditions
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.2%
The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
Affected configurations
Node
linuxlinux_kernelRange≤2.6.28rc4
ORlinuxlinux_kernelMatch2.6
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16.42
ORlinuxlinux_kernelMatch2.6.16.43
ORlinuxlinux_kernelMatch2.6.16.44
ORlinuxlinux_kernelMatch2.6.16.45
ORlinuxlinux_kernelMatch2.6.16.46
ORlinuxlinux_kernelMatch2.6.16.47
ORlinuxlinux_kernelMatch2.6.16.48
ORlinuxlinux_kernelMatch2.6.16.49
ORlinuxlinux_kernelMatch2.6.16.50
ORlinuxlinux_kernelMatch2.6.16.51
ORlinuxlinux_kernelMatch2.6.16.52
ORlinuxlinux_kernelMatch2.6.16.53
ORlinuxlinux_kernelMatch2.6.16.54
ORlinuxlinux_kernelMatch2.6.16.55
ORlinuxlinux_kernelMatch2.6.16.56
ORlinuxlinux_kernelMatch2.6.16.57
ORlinuxlinux_kernelMatch2.6.16.58
ORlinuxlinux_kernelMatch2.6.16.59
ORlinuxlinux_kernelMatch2.6.16.60
ORlinuxlinux_kernelMatch2.6.16.61
ORlinuxlinux_kernelMatch2.6.16.62
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.18.7
ORlinuxlinux_kernelMatch2.6.18.8
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.19.3
ORlinuxlinux_kernelMatch2.6.19.4
ORlinuxlinux_kernelMatch2.6.19.5
ORlinuxlinux_kernelMatch2.6.19.6
ORlinuxlinux_kernelMatch2.6.19.7
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.6
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.20.16
ORlinuxlinux_kernelMatch2.6.20.17
ORlinuxlinux_kernelMatch2.6.20.18
ORlinuxlinux_kernelMatch2.6.20.19
ORlinuxlinux_kernelMatch2.6.20.20
ORlinuxlinux_kernelMatch2.6.20.21
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6.21.4
ORlinuxlinux_kernelMatch2.6.21.5
ORlinuxlinux_kernelMatch2.6.21.6
ORlinuxlinux_kernelMatch2.6.21.7
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.2
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.22.8
ORlinuxlinux_kernelMatch2.6.22.9
ORlinuxlinux_kernelMatch2.6.22.10
ORlinuxlinux_kernelMatch2.6.22.11
ORlinuxlinux_kernelMatch2.6.22.12
ORlinuxlinux_kernelMatch2.6.22.13
ORlinuxlinux_kernelMatch2.6.22.14
ORlinuxlinux_kernelMatch2.6.22.15
ORlinuxlinux_kernelMatch2.6.22.16
ORlinuxlinux_kernelMatch2.6.22.17
ORlinuxlinux_kernelMatch2.6.22.18
ORlinuxlinux_kernelMatch2.6.22.19
ORlinuxlinux_kernelMatch2.6.22.20
ORlinuxlinux_kernelMatch2.6.22.21
ORlinuxlinux_kernelMatch2.6.22.22
ORlinuxlinux_kernelMatch2.6.22_rc1
ORlinuxlinux_kernelMatch2.6.22_rc7
ORlinuxlinux_kernelMatch2.6.23
ORlinuxlinux_kernelMatch2.6.23rc2
ORlinuxlinux_kernelMatch2.6.23.1
ORlinuxlinux_kernelMatch2.6.23.2
ORlinuxlinux_kernelMatch2.6.23.3
ORlinuxlinux_kernelMatch2.6.23.4
ORlinuxlinux_kernelMatch2.6.23.5
ORlinuxlinux_kernelMatch2.6.23.6
ORlinuxlinux_kernelMatch2.6.23.7
ORlinuxlinux_kernelMatch2.6.23.8
ORlinuxlinux_kernelMatch2.6.23.9
ORlinuxlinux_kernelMatch2.6.23.10
ORlinuxlinux_kernelMatch2.6.23.11
ORlinuxlinux_kernelMatch2.6.23.12
ORlinuxlinux_kernelMatch2.6.23.13
ORlinuxlinux_kernelMatch2.6.23.14
ORlinuxlinux_kernelMatch2.6.23.15
ORlinuxlinux_kernelMatch2.6.23.16
ORlinuxlinux_kernelMatch2.6.23.17
ORlinuxlinux_kernelMatch2.6.23_rc1
ORlinuxlinux_kernelMatch2.6.24
ORlinuxlinux_kernelMatch2.6.24rc2
ORlinuxlinux_kernelMatch2.6.24rc3
ORlinuxlinux_kernelMatch2.6.24.1
ORlinuxlinux_kernelMatch2.6.24.2
ORlinuxlinux_kernelMatch2.6.24.3
ORlinuxlinux_kernelMatch2.6.24.4
ORlinuxlinux_kernelMatch2.6.24.5
ORlinuxlinux_kernelMatch2.6.24.6
ORlinuxlinux_kernelMatch2.6.24.7
ORlinuxlinux_kernelMatch2.6.24_rc1
ORlinuxlinux_kernelMatch2.6.24_rc4
ORlinuxlinux_kernelMatch2.6.24_rc5
ORlinuxlinux_kernelMatch2.6.25
ORlinuxlinux_kernelMatch2.6.25.1
ORlinuxlinux_kernelMatch2.6.25.2
ORlinuxlinux_kernelMatch2.6.25.3
ORlinuxlinux_kernelMatch2.6.25.4
ORlinuxlinux_kernelMatch2.6.25.5
ORlinuxlinux_kernelMatch2.6.25.6
ORlinuxlinux_kernelMatch2.6.25.7
ORlinuxlinux_kernelMatch2.6.25.8
ORlinuxlinux_kernelMatch2.6.25.9
ORlinuxlinux_kernelMatch2.6.25.10
ORlinuxlinux_kernelMatch2.6.25.11
ORlinuxlinux_kernelMatch2.6.25.12
ORlinuxlinux_kernelMatch2.6.25.13
ORlinuxlinux_kernelMatch2.6.25.14
ORlinuxlinux_kernelMatch2.6.25.15
ORlinuxlinux_kernelMatch2.6.25.16
ORlinuxlinux_kernelMatch2.6.25.17
ORlinuxlinux_kernelMatch2.6.25.18
ORlinuxlinux_kernelMatch2.6.25.19
ORlinuxlinux_kernelMatch2.6.25.20
ORlinuxlinux_kernelMatch2.6.26
ORlinuxlinux_kernelMatch2.6.26rc4
ORlinuxlinux_kernelMatch2.6.26.1
ORlinuxlinux_kernelMatch2.6.26.2
ORlinuxlinux_kernelMatch2.6.26.3
ORlinuxlinux_kernelMatch2.6.26.4
ORlinuxlinux_kernelMatch2.6.26.5
ORlinuxlinux_kernelMatch2.6.26.6
ORlinuxlinux_kernelMatch2.6.26.7
ORlinuxlinux_kernelMatch2.6.26.8
ORlinuxlinux_kernelMatch2.6.27
ORlinuxlinux_kernelMatch2.6.27rc1
ORlinuxlinux_kernelMatch2.6.27rc2
ORlinuxlinux_kernelMatch2.6.27rc3
ORlinuxlinux_kernelMatch2.6.27rc4
ORlinuxlinux_kernelMatch2.6.27rc5
ORlinuxlinux_kernelMatch2.6.27rc6
ORlinuxlinux_kernelMatch2.6.27rc7
ORlinuxlinux_kernelMatch2.6.27rc8
ORlinuxlinux_kernelMatch2.6.27rc9
ORlinuxlinux_kernelMatch2.6.27.1
ORlinuxlinux_kernelMatch2.6.27.2
ORlinuxlinux_kernelMatch2.6.27.3
ORlinuxlinux_kernelMatch2.6.27.4
ORlinuxlinux_kernelMatch2.6.28
ORlinuxlinux_kernelMatch2.6.28rc1
ORlinuxlinux_kernelMatch2.6.28rc2
ORlinuxlinux_kernelMatch2.6.28rc3
References
kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5
lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html
lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html
secunia.com/advisories/32998
secunia.com/advisories/33083
secunia.com/advisories/33348
secunia.com/advisories/33623
secunia.com/advisories/33641
secunia.com/advisories/33704
secunia.com/advisories/33706
secunia.com/advisories/33756
secunia.com/advisories/33854
wiki.rpath.com/wiki/Advisories:rPSA-2008-0332
www.debian.org/security/2008/dsa-1681
www.redhat.com/support/errata/RHSA-2009-0053.html
www.redhat.com/support/errata/RHSA-2009-0225.html
www.securityfocus.com/archive/1/499044/100/0/threaded
www.securityfocus.com/bid/33503
www.ubuntu.com/usn/usn-715-1
issues.rpath.com/browse/RPL-2915
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584
usn.ubuntu.com/714-1/
www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html
Social References
More
Related
veracode
veracode
Privilege Escalation
2020-04-10 00:29:30
cvelist
cvelist
CVE-2008-5182
2008-11-21 02:00:00
prion
prion
Race condition
2008-11-21 02:30:00
nvd
nvd
CVE-2008-5182
2008-11-21 02:30:00
ubuntucve
ubuntucve
CVE-2008-5182
2008-11-21 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:0225
2009-01-26 00:00:00
Fedora Update for kernel FEDORA-2008-11593
2009-02-13 00:00:00
Fedora Update for kernel FEDORA-2008-11593
2009-02-13 00:00:00
nessus
nessus
Fedora 10 : kernel-2.6.27.9-159.fc10 (2008-11593)
2009-04-23 00:00:00
Fedora 9 : kernel-2.6.27.9-73.fc9 (2008-11618)
2008-12-26 00:00:00
RHEL 5 : kernel (RHSA-2009:0021)
2013-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: kernel-2.6.27.9-159.fc10
2008-12-24 18:45:37
[SECURITY] Fedora 9 Update: kernel-2.6.27.9-73.fc9
2008-12-24 18:47:55
redhat
redhat
(RHSA-2009:0225) Important: Red Hat Enterprise Linux 5.3 kernel security and bug fix update
2009-01-20 00:00:00
(RHSA-2009:0021) Important: kernel security update
2009-02-24 00:00:00
(RHSA-2009:0053) Important: kernel-rt security and bug fix update
2009-02-04 00:00:00
suse
suse
local privilege escalation in kernel
2009-01-29 16:12:11
local privilege escalation in kernel
2009-01-21 20:06:24
local privilege escalation in kernel-debug
2009-01-20 17:01:02
securityvulns
securityvulns
Linux kernel multiple security vulnerabilities
2008-12-29 00:00:00
Linux kernel multiple security vulnerabilities
2009-01-31 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2009-01-29 00:00:00
Linux kernel vulnerabilities
2009-01-29 00:00:00
osv
osv
linux-2.6.24 - several vulnerabilities
2008-12-04 00:00:00
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2008-12-15 00:00:00
debian
debian
oraclelinux
oraclelinux
Oracle Enterprise Linux 5.3 kernel security and bug fix update
2009-01-27 00:00:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.2%
Related for CVE-2008-5182