CVE-2008-2137

Linux kernel < 2.4.36.5 and < 2.6.25.3 - Denial of Service via mmap Virtual Address Range Check Bypass

Title source: llm
STIX 2.1

Description

The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42681
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30368
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29397
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-625-1
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1716/references
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020119
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30499
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1588
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31107

Scores

EPSS 0.0045
EPSS Percentile 36.8%

Details

CWE
CWE-264
Status published
Products (50)
debian/debian_linux 4.0
linux/linux_kernel 2.6.0
linux/linux_kernel 2.6.1
linux/linux_kernel 2.6.2
linux/linux_kernel 2.6.3
linux/linux_kernel 2.6.4
linux/linux_kernel 2.6.5
linux/linux_kernel 2.6.6
linux/linux_kernel 2.6.7
linux/linux_kernel 2.6.8
... and 40 more
Published May 29, 2008
Tracked Since Feb 18, 2026