CVE-2008-0010
12.02.2008, 21:00
The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.Enginsight
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 2.6.22 |
| linux | linux_kernel | 2.6.22:rc6 |
| linux | linux_kernel | 2.6.22.1 |
| linux | linux_kernel | 2.6.22.3 |
| linux | linux_kernel | 2.6.22.4 |
| linux | linux_kernel | 2.6.22.5 |
| linux | linux_kernel | 2.6.22.6 |
| linux | linux_kernel | 2.6.22.7 |
| linux | linux_kernel | 2.6.22.16 |
| linux | linux_kernel | 2.6.23 |
| linux | linux_kernel | 2.6.23:rc1 |
| linux | linux_kernel | 2.6.23:rc2 |
| linux | linux_kernel | 2.6.23.1 |
| linux | linux_kernel | 2.6.23.2 |
| linux | linux_kernel | 2.6.23.3 |
| linux | linux_kernel | 2.6.23.4 |
| linux | linux_kernel | 2.6.23.5 |
| linux | linux_kernel | 2.6.23.6 |
| linux | linux_kernel | 2.6.23.7 |
| linux | linux_kernel | 2.6.23.9 |
| linux | linux_kernel | 2.6.23.14 |
| linux | linux_kernel | 2.6.24:rc2 |
| linux | linux_kernel | 2.6.24:rc3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||
| linux-source-2.6.15 |
| ||||||||
| linux-source-2.6.17 |
| ||||||||
| linux-source-2.6.20 |
| ||||||||
| linux-source-2.6.22 |
|
Common Weakness Enumeration
References