CVE-2008-2137

The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.4 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
debiandebian_linux
4.0
linuxlinux_kernel
2.6.0
linuxlinux_kernel
2.6.1
linuxlinux_kernel
2.6.2
linuxlinux_kernel
2.6.3
linuxlinux_kernel
2.6.4
linuxlinux_kernel
2.6.5
linuxlinux_kernel
2.6.6
linuxlinux_kernel
2.6.7
linuxlinux_kernel
2.6.8
linuxlinux_kernel
2.6.9
linuxlinux_kernel
2.6.10
linuxlinux_kernel
2.6.11
linuxlinux_kernel
2.6.11.4
linuxlinux_kernel
2.6.11.5
linuxlinux_kernel
2.6.11.6
linuxlinux_kernel
2.6.11.7
linuxlinux_kernel
2.6.11.8
linuxlinux_kernel
2.6.11.11
linuxlinux_kernel
2.6.11.12
linuxlinux_kernel
2.6.12
linuxlinux_kernel
2.6.12.1
linuxlinux_kernel
2.6.12.2
linuxlinux_kernel
2.6.12.3
linuxlinux_kernel
2.6.12.4
linuxlinux_kernel
2.6.12.5
linuxlinux_kernel
2.6.12.6
linuxlinux_kernel
2.6.12.12
linuxlinux_kernel
2.6.12.22
linuxlinux_kernel
2.6.13
linuxlinux_kernel
2.6.13.1
linuxlinux_kernel
2.6.13.2
linuxlinux_kernel
2.6.13.3
linuxlinux_kernel
2.6.13.4
linuxlinux_kernel
2.6.14
linuxlinux_kernel
2.6.14.1
linuxlinux_kernel
2.6.14.2
linuxlinux_kernel
2.6.14.3
linuxlinux_kernel
2.6.14.4
linuxlinux_kernel
2.6.14.5
linuxlinux_kernel
2.6.15
linuxlinux_kernel
2.6.15.1
linuxlinux_kernel
2.6.15.2
linuxlinux_kernel
2.6.15.3
linuxlinux_kernel
2.6.15.4
linuxlinux_kernel
2.6.15.5
linuxlinux_kernel
2.6.15.11
linuxlinux_kernel
2.6.16
linuxlinux_kernel
2.6.16.13
linuxlinux_kernel
2.6.16.27
linuxlinux_kernel
2.6.17
linuxlinux_kernel
2.6.17.1
linuxlinux_kernel
2.6.17.2
linuxlinux_kernel
2.6.17.3
linuxlinux_kernel
2.6.17.5
linuxlinux_kernel
2.6.17.6
linuxlinux_kernel
2.6.17.7
linuxlinux_kernel
2.6.17.8
linuxlinux_kernel
2.6.17.10
linuxlinux_kernel
2.6.17.11
linuxlinux_kernel
2.6.17.12
linuxlinux_kernel
2.6.17.13
linuxlinux_kernel
2.6.17.14
linuxlinux_kernel
2.6.18
linuxlinux_kernel
2.6.18.1
linuxlinux_kernel
2.6.18.3
linuxlinux_kernel
2.6.18.4
linuxlinux_kernel
2.6.19
linuxlinux_kernel
2.6.19.1
linuxlinux_kernel
2.6.19.2
linuxlinux_kernel
2.6.20
linuxlinux_kernel
2.6.20.1
linuxlinux_kernel
2.6.20.2
linuxlinux_kernel
2.6.20.3
linuxlinux_kernel
2.6.20.4
linuxlinux_kernel
2.6.20.5
linuxlinux_kernel
2.6.20.8
linuxlinux_kernel
2.6.20.9
linuxlinux_kernel
2.6.20.11
linuxlinux_kernel
2.6.20.13
linuxlinux_kernel
2.6.20.15
linuxlinux_kernel
2.6.21
linuxlinux_kernel
2.6.21.1
linuxlinux_kernel
2.6.21.2
linuxlinux_kernel
2.6.21.4
linuxlinux_kernel
2.6.21.6
linuxlinux_kernel
2.6.21.7
linuxlinux_kernel
2.6.22
linuxlinux_kernel
2.6.22.3
linuxlinux_kernel
2.6.22.4
linuxlinux_kernel
2.6.22.5
linuxlinux_kernel
2.6.22.6
linuxlinux_kernel
2.6.22.7
linuxlinux_kernel
2.6.22.8
linuxlinux_kernel
2.6.22.11
linuxlinux_kernel
2.6.22.12
linuxlinux_kernel
2.6.22.13
linuxlinux_kernel
2.6.22.14
linuxlinux_kernel
2.6.22.15
linuxlinux_kernel
2.6.22.16
linuxlinux_kernel
2.6.22.17
linuxlinux_kernel
2.6.23
linuxlinux_kernel
2.6.23.1
linuxlinux_kernel
2.6.23.2
linuxlinux_kernel
2.6.23.3
linuxlinux_kernel
2.6.23.4
linuxlinux_kernel
2.6.23.5
linuxlinux_kernel
2.6.23.6
linuxlinux_kernel
2.6.23.7
linuxlinux_kernel
2.6.23.9
linuxlinux_kernel
2.6.23.14
linuxlinux_kernel
2.6.24.1
linuxlinux_kernel
2.6.24.2
linuxlinux_kernel
2.6.25
linuxlinux_kernel
2.6.25.1
linuxlinux_kernel
2.6.25.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
hardy
Fixed 2.6.24-19.36
released
gutsy
dne
feisty
dne
dapper
dne
linux-source-2.6.15
hardy
dne
gutsy
dne
feisty
dne
dapper
Fixed 2.6.15-52.69
released
linux-source-2.6.20
hardy
dne
gutsy
dne
feisty
Fixed 2.6.20-17.37
released
dapper
dne
linux-source-2.6.22
hardy
dne
gutsy
Fixed 2.6.22-15.56
released
feisty
dne
dapper
dne
Common Weakness Enumeration
References
http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604
http://secunia.com/advisories/30368
http://secunia.com/advisories/30499
http://secunia.com/advisories/31107
http://www.debian.org/security/2008/dsa-1588
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3
http://www.securityfocus.com/bid/29397
http://www.securitytracker.com/id?1020119
http://www.ubuntu.com/usn/usn-625-1
http://www.vupen.com/english/advisories/2008/1716/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42681
http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604
http://secunia.com/advisories/30368
http://secunia.com/advisories/30499
http://secunia.com/advisories/31107
http://www.debian.org/security/2008/dsa-1588
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3
http://www.securityfocus.com/bid/29397
http://www.securitytracker.com/id?1020119
http://www.ubuntu.com/usn/usn-625-1
http://www.vupen.com/english/advisories/2008/1716/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42681