CVE-2008-1669

Linux kernel <2.6.25.2 - Code Injection

Title source: llm

Description

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

References (45)

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

[Various Sources] http://lists.vmware.com/pipermail/security-announce/2008/000023.html

[Vendor Advisory] http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4

[Vendor Advisory] http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:104

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2008-0211.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2008-0233.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2008-0237.html

[Patch] http://www.securityfocus.com/bid/29076

[Vendor Advisory] http://www.ubuntu.com/usn/usn-618-1

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/42242

[Issue Tracking] https://issues.rpath.com/browse/RPL-2518

[Vendor Advisory] https://usn.ubuntu.com/614-1/

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html

... and 25 more

Scores

EPSS 0.0012

EPSS Percentile 30.7%

Classification

CWE

CWE-362 CWE-94

Status draft

Affected Products (50)

linux/linux_kernel

... and 35 more

Timeline

Published May 08, 2008

Tracked Since Feb 18, 2026