#VU95741 Race condition in Linux kernel - CVE-2008-1669
Vulnerability identifier: #VU95741
Vulnerability risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2008-1669
CWE-ID:
CWE-362
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to execute arbitrary code.
Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain 're-ordered access to the descriptor table.'
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel: All versions
External links
https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
https://lists.vmware.com/pipermail/security-announce/2008/000023.html
https://secunia.com/advisories/30077
https://secunia.com/advisories/30101
https://secunia.com/advisories/30108
https://secunia.com/advisories/30110
https://secunia.com/advisories/30112
https://secunia.com/advisories/30116
https://secunia.com/advisories/30164
https://secunia.com/advisories/30252
https://secunia.com/advisories/30260
https://secunia.com/advisories/30276
https://secunia.com/advisories/30515
https://secunia.com/advisories/30769
https://secunia.com/advisories/30818
https://secunia.com/advisories/30962
https://secunia.com/advisories/30982
https://secunia.com/advisories/31246
https://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162
https://www.debian.org/security/2008/dsa-1575
https://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4
https://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2
https://www.mandriva.com/security/advisories?name=MDVSA-2008:104
https://www.mandriva.com/security/advisories?name=MDVSA-2008:105
https://www.mandriva.com/security/advisories?name=MDVSA-2008:167
https://www.redhat.com/support/errata/RHSA-2008-0211.html
https://www.redhat.com/support/errata/RHSA-2008-0233.html
https://www.redhat.com/support/errata/RHSA-2008-0237.html
https://www.securityfocus.com/archive/1/491740/100/0/threaded
https://www.securityfocus.com/bid/29076
https://www.securitytracker.com/id?1019974
https://www.ubuntu.com/usn/usn-618-1
https://www.vupen.com/english/advisories/2008/1451/references
https://www.vupen.com/english/advisories/2008/1452/references
https://www.vupen.com/english/advisories/2008/2222/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42242
https://issues.rpath.com/browse/RPL-2518
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065
https://usn.ubuntu.com/614-1/
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
