VulnerabilityModified

CVE-2008-1375

Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.

MEDIUM 6.9EPSS 0.31%

Does this matter?

Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS: 0.31% probability · 23th percentile
CISA KEV: Not listed
Weakness: CWE-362
Affected: linux/linux kernel · canonical/ubuntu linux · opensuse/opensuse · suse/linux enterprise desktop · suse/linux enterprise server · suse/linux enterprise software development kit · debian/debian linux · fedoraproject/fedora
Source: secalert@redhat.com

References

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.htmlMailing List, Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2008/000023.htmlThird Party Advisory
http://marc.info/?l=linux-kernel&m=120967963803205&w=2Patch, Third Party Advisory
http://marc.info/?l=linux-kernel&m=120967964303224&w=2Patch, Third Party Advisory
http://secunia.com/advisories/30017Third Party Advisory
http://secunia.com/advisories/30018Third Party Advisory
http://secunia.com/advisories/30044Third Party Advisory
http://secunia.com/advisories/30108Third Party Advisory
http://secunia.com/advisories/30110Third Party Advisory
http://secunia.com/advisories/30112Third Party Advisory
http://secunia.com/advisories/30116Third Party Advisory
http://secunia.com/advisories/30260Third Party Advisory
http://secunia.com/advisories/30515Third Party Advisory
http://secunia.com/advisories/30769Third Party Advisory
http://secunia.com/advisories/30818Third Party Advisory
http://secunia.com/advisories/30890Third Party Advisory
http://secunia.com/advisories/30962Third Party Advisory
http://secunia.com/advisories/31246Third Party Advisory
http://wiki.rpath.com/Advisories:rPSA-2008-0157Broken Link
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157Broken Link
http://www.debian.org/security/2008/dsa-1565Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2008:104Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:105Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0211.htmlThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.