CVE-2008-1375
published 2008-05-02CVE-2008-1375: Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause…
PriorityP419medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.31%
22.9th percentile
Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 2.6.0 < 2.6.24.6 | 2.6.24.6 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_software_development_kit | — | — |
CVSS provenance
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
vendor_ubuntu7.8HIGH
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2008-06-19·CVSS 2.1
CVE-2007-4571 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Linux kernel vulnerabilities
It was discovered that the ALSA /proc interface did not write the
correct number of bytes when reporting memory allocations. A local
attacker might be able to access sensitive kernel memory, leading to
a loss of privacy. (CVE-2007-4571)
Multiple buffer overflows were discovered in the handling of CIFS
filesystems. A malicious CIFS server could cause a client system crash
or possibly execute arbitrary code with kernel privileges. (CVE-2007-5904)
It was discovered that PowerPC kernels did not correctly handle reporting
certain system details. By requesting a specific set of information,
a local attacker could cause a system crash resulting in a denial
of service. (CVE-2007-6694)
It was discovered that some device
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2008-06-03·CVSS 7.8
CVE-2007-6694 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Linux kernel vulnerabilities
It was discovered that PowerPC kernels did not correctly handle reporting
certain system details. By requesting a specific set of information,
a local attacker could cause a system crash resulting in a denial
of service. (CVE-2007-6694)
A race condition was discovered between dnotify fcntl() and close() in
the kernel. If a local attacker performed malicious dnotify requests,
they could cause memory consumption leading to a denial of service,
or possibly send arbitrary signals to any process. (CVE-2008-1375)
On SMP systems, a race condition existed in fcntl(). Local attackers
could perform malicious locks, causing system crashes and leading to
a denial of service. (CVE-2008-1669)
The tehuti network driver did not
Red Hat
kernel: race condition in dnotify (local DoS, local roothole possible)
vendor_redhat·2008-05-01·CVSS 6.9
CVE-2008-1375 [MEDIUM] kernel: race condition in dnotify (local DoS, local roothole possible)
kernel: race condition in dnotify (local DoS, local roothole possible)
Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.
GHSA
GHSA-7mhj-67x6-fh4q: Race condition in the directory notification subsystem (dnotify) in Linux kernel 2
ghsa_unreviewed·2022-05-01
CVE-2008-1375 [MEDIUM] CWE-362 GHSA-7mhj-67x6-fh4q: Race condition in the directory notification subsystem (dnotify) in Linux kernel 2
Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2009-1376 CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 Multiple pidgin vulnerabilities
bugzilla·2009-05-26·CVSS 6.8
CVE-2009-1376 [MEDIUM] CVE-2009-1376 CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 Multiple pidgin vulnerabilities
CVE-2009-1376 CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 Multiple pidgin vulnerabilities
This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in all affected branches.
For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in "Blocks" field.
bug #500493: CVE-2009-1376 pidgin incomplete fix for CVE-2008-2927
bug #500488: CVE-2009-1373 pidgin file transfer buffer overflow
bug #500490: CVE-2009-1374 pidgin DoS when decrypting qq packets
bug #500491: CVE-2009-1375 pidgin PurpleCircBuffer corruption
When creating a Bodhi update request, please include the bug IDs of the respective parent bugs filed against the "Security Response" product.
Please mention CVE
Bugzilla
CVE-2008-1375 kernel: race condition in dnotify (local DoS, local roothole possible)
bugzilla·2008-03-31·CVSS 6.9
CVE-2008-1375 [MEDIUM] CVE-2008-1375 kernel: race condition in dnotify (local DoS, local roothole possible)
CVE-2008-1375 kernel: race condition in dnotify (local DoS, local roothole possible)
Description of problem:
Alexander Viro has reported the following serious Linux kernel issue:
fcntl_dirnotify() adds an element to inode->i_dnotify. It contains
a reference to struct file and to struct files_struct (both not contributing
to refcounts). filp_close() (called when reference to file is removed
from descriptor table) purges element with file/descriptor table in question
from ->i_dnotify. The problem is, fcntl() can race with close() from another
thread, inserting element *after* close() is finished. If that happens,
the sucker is stuck there forever, long after the struct file it refers
to had been freed/reused/etc. Actually, even having the (in-core) inode
freed and reused doesn't clean it
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.htmlhttp://lists.vmware.com/pipermail/security-announce/2008/000023.htmlhttp://marc.info/?l=linux-kernel&m=120967963803205&w=2http://marc.info/?l=linux-kernel&m=120967964303224&w=2http://secunia.com/advisories/30017http://secunia.com/advisories/30018http://secunia.com/advisories/30044http://secunia.com/advisories/30108http://secunia.com/advisories/30110http://secunia.com/advisories/30112http://secunia.com/advisories/30116http://secunia.com/advisories/30260http://secunia.com/advisories/30515http://secunia.com/advisories/30769http://secunia.com/advisories/30818http://secunia.com/advisories/30890http://secunia.com/advisories/30962http://secunia.com/advisories/31246http://wiki.rpath.com/Advisories:rPSA-2008-0157http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157http://www.debian.org/security/2008/dsa-1565http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1http://www.mandriva.com/security/advisories?name=MDVSA-2008:104http://www.mandriva.com/security/advisories?name=MDVSA-2008:105http://www.mandriva.com/security/advisories?name=MDVSA-2008:167http://www.redhat.com/support/errata/RHSA-2008-0211.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0233.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0237.htmlhttp://www.securityfocus.com/archive/1/491566/100/0/threadedhttp://www.securityfocus.com/archive/1/491732/100/0/threadedhttp://www.securityfocus.com/bid/29003http://www.securitytracker.com/id?1019959http://www.ubuntu.com/usn/usn-618-1http://www.vupen.com/english/advisories/2008/1406/referenceshttp://www.vupen.com/english/advisories/2008/1452/referenceshttp://www.vupen.com/english/advisories/2008/2222/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42131https://issues.rpath.com/browse/RPL-2501https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843https://usn.ubuntu.com/614-1/https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.htmlhttp://lists.vmware.com/pipermail/security-announce/2008/000023.htmlhttp://marc.info/?l=linux-kernel&m=120967963803205&w=2http://marc.info/?l=linux-kernel&m=120967964303224&w=2http://secunia.com/advisories/30017http://secunia.com/advisories/30018http://secunia.com/advisories/30044http://secunia.com/advisories/30108http://secunia.com/advisories/30110http://secunia.com/advisories/30112http://secunia.com/advisories/30116http://secunia.com/advisories/30260http://secunia.com/advisories/30515http://secunia.com/advisories/30769http://secunia.com/advisories/30818http://secunia.com/advisories/30890http://secunia.com/advisories/30962http://secunia.com/advisories/31246http://wiki.rpath.com/Advisories:rPSA-2008-0157http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157http://www.debian.org/security/2008/dsa-1565http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1http://www.mandriva.com/security/advisories?name=MDVSA-2008:104http://www.mandriva.com/security/advisories?name=MDVSA-2008:105http://www.mandriva.com/security/advisories?name=MDVSA-2008:167http://www.redhat.com/support/errata/RHSA-2008-0211.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0233.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0237.htmlhttp://www.securityfocus.com/archive/1/491566/100/0/threadedhttp://www.securityfocus.com/archive/1/491732/100/0/threadedhttp://www.securityfocus.com/bid/29003http://www.securitytracker.com/id?1019959http://www.ubuntu.com/usn/usn-618-1http://www.vupen.com/english/advisories/2008/1406/referenceshttp://www.vupen.com/english/advisories/2008/1452/referenceshttp://www.vupen.com/english/advisories/2008/2222/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/42131https://issues.rpath.com/browse/RPL-2501https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843https://usn.ubuntu.com/614-1/https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html
2008-05-02
Published