PT-2008-6326 · Linux+1 · Linux Kernel+1

Al Viro

·

Published

2008-11-21

·

Updated

2018-10-11

·

CVE-2008-5182

CVSS v2.0

6.9

Medium

VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.28-rc5
Description The issue is related to the inotify functionality in the Linux kernel, which might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
Recommendations For Linux kernel versions prior to 2.6.28-rc5, update to version 2.6.28-rc5 or later to resolve the issue.

Fix

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2008-5182
DSA-1681-1
DSA-1687-1
RHSA-2009:0021
RHSA-2009:0053
RHSA-2009:0225
RHSA-2009_0225

Affected Products

Linux Kernel
Red Hat