PT-2008-6911 · Linux+1 · Linux Kernel+1

Alexey Dobriyan · Published 1970-01-01 · Updated 2020-07-31 · CVE-2008-3535

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.27-rc2 linux-headers-2.6.24-etchnhalf.1-r5k-ip32 (affected versions not specified) linux-headers-2.6.24-etchnhalf.1-all-mips (affected versions not specified) linux-headers-2.6.24-etchnhalf.1-r4k-ip22 (affected versions not specified) linux-image-2.6.24-etchnhalf.1-r5k-ip32 (affected versions not specified) linux-image-2.6.24-etchnhalf.1-r4k-ip22 (affected versions not specified)

Description The issue is caused by an off-by-one error in the iov iter advance function in mm/filemap.c in the Linux kernel. This can lead to a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev. Additionally, multiple vulnerabilities in Debian GNU/Linux packages may allow remote exploitation, leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For Linux kernel versions prior to 2.6.27-rc2: Update to version 2.6.27-rc2 or later to resolve the issue. For linux-headers-2.6.24-etchnhalf.1-r5k-ip32, linux-headers-2.6.24-etchnhalf.1-all-mips, linux-headers-2.6.24-etchnhalf.1-r4k-ip22, linux-image-2.6.24-etchnhalf.1-r5k-ip32, and linux-image-2.6.24-etchnhalf.1-r4k-ip22: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-193

Related Identifiers

BDU:2015-02636

BDU:2015-02637

BDU:2015-02638

BDU:2015-02639

BDU:2015-02640

CVE-2008-3535

DSA-1636-1

RHSA-2008:0857

Affected Products

Debian

Linux Kernel

References · 26

• 🔥 http://lkml.org/lkml/2008/7/30/446 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3276 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3526 · Security Note
• http://debian.org/security/2008/dsa-1636 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02636 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3792 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3535 · Security Note
• https://bdu.fstec.ru/vul/2015-02637 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3272 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-3535 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3534 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3275 · Security Note
• https://bdu.fstec.ru/vul/2015-02640 · Security Note
• http://ubuntu.com/usn/usn-659-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3915 · Security Note