PT-2008-4251 · Linux+1 · Linux Kernel+1

Published 2008-07-09 · Updated 2023-02-13 · CVE-2008-2812

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.25.10

Description The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly gain privileges. This is achieved through vectors involving NULL pointer dereference of function pointers in various driver files, including hamradio/6pack.c, hamradio/mkiss.c, irda/irtty-sir.c, ppp async.c, ppp synctty.c, slip.c, wan/x25 asy.c, and wireless/strip.c in drivers/net/.

Recommendations For Linux kernel versions prior to 2.6.25.10, update to version 2.6.25.10 or later to resolve the issue.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2008-2812

DSA-1630-1

RHSA-2008:0612

RHSA-2008:0665

RHSA-2008:0973

RHSA-2008_0612

RHSA-2008_0665

Affected Products

Linux Kernel

Red Hat

References · 80

• https://bdu.fstec.ru/vul/2015-04902 · Security Note
• https://bdu.fstec.ru/vul/2015-04910 · Security Note
• http://securityfocus.com/bid/30076 · Patch
• https://bdu.fstec.ru/vul/2015-04907 · Security Note
• https://bdu.fstec.ru/vul/2015-04899 · Security Note
• https://bdu.fstec.ru/vul/2015-04224 · Security Note
• https://bdu.fstec.ru/vul/2015-04909 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2812 · Security Note
• https://bdu.fstec.ru/vul/2015-04915 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html · Vendor Advisory
• https://usn.ubuntu.com/637-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04916 · Security Note
• https://bdu.fstec.ru/vul/2015-06242 · Security Note