PT-2008-6326 · Linux+1 · Linux Kernel+1

Al Viro

·

Publicado

2008-11-21

·

Atualizado

2018-10-11

·

CVE-2008-5182

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.28-rc5
Description The issue is related to the inotify functionality in the Linux kernel, which might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
Recommendations For Linux kernel versions prior to 2.6.28-rc5, update to version 2.6.28-rc5 or later to resolve the issue.

Correção

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2008-5182
DSA-1681-1
DSA-1687-1
RHSA-2009:0021
RHSA-2009:0053
RHSA-2009:0225
RHSA-2009_0225

Produtos afetados

Linux Kernel
Red Hat