CVE-2008-1675

Linux kernel <2.6.25.1 - Local Attack

Title source: llm

Description

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.

References (21)

[Exploit] http://marc.info/?l=linux-kernel&m=120949204519706&w=2

[Exploit] http://marc.info/?l=linux-kernel&m=120949204619718&w=2

[Exploit] http://marc.info/?l=linux-kernel&m=120949582428998&w=2

[Vendor Advisory] http://secunia.com/advisories/30017

[Vendor Advisory] http://secunia.com/advisories/30044

[Vendor Advisory] http://secunia.com/advisories/30260

[Vendor Advisory] http://secunia.com/advisories/30515

[Vendor Advisory] http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:109

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/491566/100/0/threaded

[Vendor Advisory] http://www.vupen.com/english/advisories/2008/1406/references

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/42132

[Issue Tracking] https://issues.rpath.com/browse/RPL-2501

[Vendor Advisory] https://usn.ubuntu.com/614-1/

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html

[Third Party Advisory] http://wiki.rpath.com/Advisories:rPSA-2008-0157

[Third Party Advisory] http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/491732/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/29014

... and 1 more

Scores

EPSS 0.0007

EPSS Percentile 20.6%

Classification

CWE

CWE-399

Status draft

Affected Products (50)

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

... and 35 more

Timeline

Published May 02, 2008

Tracked Since Feb 18, 2026