Lucene search

K
osvGoogleOSV:DSA-1575-1
HistoryMay 12, 2008 - 12:00 a.m.

linux-2.6 - denial of service

2008-05-1200:00:00
Google
osv.dev
6

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.3%

A vulnerability has been discovered in the Linux kernel that may lead
to a denial of service. The Common Vulnerabilities and Exposures
project identifies the following problem:

  • CVE-2008-1669
    Alexander Viro discovered a race condition in the fcntl code that
    may permit local users on multi-processor systems to execute parallel
    code paths that are otherwise prohibited and gain re-ordered access
    to the descriptor table.

For the stable distribution (etch), this problem has been fixed in version
2.6.18.dfsg.1-18etch4.

For the unstable distribution (sid), this problem has been fixed in version
2.6.25-2.

We recommend that you upgrade your linux-2.6, fai-kernels, and
user-mode-linux packages.

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.3%