PT-2008-3221 · Linux+1 · Linux Kernel+1

Alexander Viro

·

Published

2008-05-07

·

Updated

2018-10-30

·

CVE-2008-1669

CVSS v2.0

6.9

Medium

VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.25.2
Description The issue allows local users to execute code in parallel or exploit a race condition to obtain re-ordered access to the descriptor table due to the lack of a certain protection mechanism for fcntl functionality.
Recommendations For versions prior to 2.6.25.2, update to version 2.6.25.2 or later to resolve the issue.

Fix

Code Injection

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94CWE-362

Related Identifiers

CVE-2008-1669
DSA-1575-1
RHSA-2008:0211
RHSA-2008:0233
RHSA-2008:0237
RHSA-2008_0233
RHSA-2008_0237

Affected Products

Linux Kernel
Red Hat