CVEvulnerability

CVE-2008-0600

7.2 HIGH Published 2008-02-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-02-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.

Affected configurations

• linux linux kernel 2.6.17 • linux linux kernel 2.6.17.1 • linux linux kernel 2.6.17.2 • linux linux kernel 2.6.17.3 • linux linux kernel 2.6.17.4 • linux linux kernel 2.6.17.5 • linux linux kernel 2.6.17.6 • linux linux kernel 2.6.17.7 • linux linux kernel 2.6.17.8 • linux linux kernel 2.6.17.9 • linux linux kernel 2.6.17.10 • linux linux kernel 2.6.17.11 • linux linux kernel 2.6.17.12 • linux linux kernel 2.6.17.13 • linux linux kernel 2.6.17.14 • linux linux kernel 2.6.18 • linux linux kernel 2.6.18.1 • linux linux kernel 2.6.18.2 • linux linux kernel 2.6.18.3 • linux linux kernel 2.6.18.4 • linux linux kernel 2.6.18.5 • linux linux kernel 2.6.18.6 • linux linux kernel 2.6.18.7 • linux linux kernel 2.6.18.8 • linux linux kernel 2.6.19 • linux linux kernel 2.6.19.1 • linux linux kernel 2.6.19.2 • linux linux kernel 2.6.19.3 • linux linux kernel 2.6.20 • linux linux kernel 2.6.20.1 • linux linux kernel 2.6.20.2 • linux linux kernel 2.6.20.3 • linux linux kernel 2.6.20.4 • linux linux kernel 2.6.20.5 • linux linux kernel 2.6.20.6 • linux linux kernel 2.6.20.7 • linux linux kernel 2.6.20.8 • linux linux kernel 2.6.20.9 • linux linux kernel 2.6.20.10 • linux linux kernel 2.6.20.11 • linux linux kernel 2.6.20.12 • linux linux kernel 2.6.20.13 • linux linux kernel 2.6.20.14 • linux linux kernel 2.6.20.15 • linux linux kernel 2.6.21 • linux linux kernel 2.6.21.1 • linux linux kernel 2.6.21.2 • linux linux kernel 2.6.21.3 • linux linux kernel 2.6.21.4 • linux linux kernel 2.6.22 • linux linux kernel 2.6.22.1 • linux linux kernel 2.6.22.3 • linux linux kernel 2.6.22.4 • linux linux kernel 2.6.22.5 • linux linux kernel 2.6.22.6 • linux linux kernel 2.6.22.7 • linux linux kernel 2.6.22.16 • linux linux kernel 2.6.23 • linux linux kernel 2.6.23.1 • linux linux kernel 2.6.23.2 … and 9 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

Referenced by CWE · observed example (1)

  • CWE-20 Improper Input Validation weakness

References