logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2008-5029

Description

The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors. #### Notes Author| Note ---|--- [kees](<https://launchpad.net/~kees>) | raised priority due to public PoC


Affected Package


OS OS Version Package Name Package Version
ubuntu 08.04 linux 2.6.24-22.45
ubuntu 08.10 linux 2.6.27-9.19
ubuntu upstream linux 2.6.28~rc4
ubuntu upstream linux-source-2.6.15 2.6.28~rc4
ubuntu 07.10 linux-source-2.6.22 2.6.22-16.60
ubuntu upstream linux-source-2.6.22 2.6.28~rc4

Related