CVE-2008-2372

Linux kernel 2.6.24-2.6.25.8 - Denial of Service via get_user_pages Memory Consumption

Title source: llm

Description

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."

References (20)

Core 20

Core References

Third Party Advisory x_refsource_confirm

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32485

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32393

Various Sources mailing-list x_refsource_mlist

http://www.ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0957.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30982

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-659-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30901

Various Sources x_refsource_misc

http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0585.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html

Patch x_refsource_confirm

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f

Various Sources x_refsource_confirm

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9

Issue Tracking x_refsource_confirm

https://issues.rpath.com/browse/RPL-2629

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31628

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31202

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43550

Scores

EPSS 0.0039

EPSS Percentile 30.8%

Details

CWE

CWE-20

Status published

Products (10)

linux/linux_kernel 2.6.24

linux/linux_kernel 2.6.25

linux/linux_kernel 2.6.25.1

linux/linux_kernel 2.6.25.2

linux/linux_kernel 2.6.25.3

linux/linux_kernel 2.6.25.4

linux/linux_kernel 2.6.25.5

linux/linux_kernel 2.6.25.6

linux/linux_kernel 2.6.25.7

linux/linux_kernel 2.6.25.8

Published Jul 02, 2008

Tracked Since Feb 18, 2026