Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hugo Dias

#49868of 53,633
4.9Total CVSS
Vulnerabilities · 1
PT-2008-6231
4.9
2008-12-09
Linux · Linux Kernel · CVE-2008-5079
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.27.8 **Description** The issue is related to the ATM subsystem in the Linux kernel, where a local user can cause a denial of service by making specific calls to `svc listen` for the same socket and then reading a `/proc/net/atm/*vc` file. This action corrupts the vcc table, leading to a kernel infinite loop. **Recommendations** For Linux kernel versions prior to 2.6.27.8, consider updating to a newer version to resolve the issue. As a temporary workaround, restrict access to the `/proc/net/atm/*vc` files to minimize the risk of exploitation. Avoid making multiple calls to `svc listen` for the same socket until the issue is resolved.