CVEvulnerability
CVE-2008-5182
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-362
Description
The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
Affected configurations
• linux linux kernel (<= 2.6.28)
• linux linux kernel 2.6
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.10
• linux linux kernel 2.6.11
• linux linux kernel 2.6.11.1
• linux linux kernel 2.6.11.2
• linux linux kernel 2.6.11.3
• linux linux kernel 2.6.11.4
• linux linux kernel 2.6.11.5
• linux linux kernel 2.6.11.6
• linux linux kernel 2.6.11.7
• linux linux kernel 2.6.11.8
• linux linux kernel 2.6.11.9
• linux linux kernel 2.6.11.10
• linux linux kernel 2.6.11.11
• linux linux kernel 2.6.11.12
• linux linux kernel 2.6.12
• linux linux kernel 2.6.12.1
• linux linux kernel 2.6.12.2
• linux linux kernel 2.6.12.3
• linux linux kernel 2.6.12.4
• linux linux kernel 2.6.12.5
• linux linux kernel 2.6.12.6
• linux linux kernel 2.6.13
• linux linux kernel 2.6.13.1
• linux linux kernel 2.6.13.2
• linux linux kernel 2.6.13.3
• linux linux kernel 2.6.13.4
• linux linux kernel 2.6.13.5
• linux linux kernel 2.6.14
• linux linux kernel 2.6.14.1
• linux linux kernel 2.6.14.2
• linux linux kernel 2.6.14.3
• linux linux kernel 2.6.14.4
• linux linux kernel 2.6.14.5
• linux linux kernel 2.6.14.6
• linux linux kernel 2.6.14.7
• linux linux kernel 2.6.15
• linux linux kernel 2.6.15.1
• linux linux kernel 2.6.15.2
• linux linux kernel 2.6.15.3
• linux linux kernel 2.6.15.4
• linux linux kernel 2.6.15.5
• linux linux kernel 2.6.15.6
• linux linux kernel 2.6.15.7
• linux linux kernel 2.6.16
• linux linux kernel 2.6.16.1
• linux linux kernel 2.6.16.2
• linux linux kernel 2.6.16.3
• linux linux kernel 2.6.16.4
• linux linux kernel 2.6.16.5
• linux linux kernel 2.6.16.6
• linux linux kernel 2.6.16.7
• linux linux kernel 2.6.16.8
• linux linux kernel 2.6.16.9
• linux linux kernel 2.6.16.10
• linux linux kernel 2.6.16.11
• linux linux kernel 2.6.16.12
… and 202 more
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5 kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html lists.opensuse.org
- http://secunia.com/advisories/32998 secunia.com
- http://secunia.com/advisories/33083 secunia.com
- http://secunia.com/advisories/33348 secunia.com
- http://secunia.com/advisories/33623 secunia.com
- http://secunia.com/advisories/33641 secunia.com
- http://secunia.com/advisories/33704 secunia.com
- http://secunia.com/advisories/33706 secunia.com
- http://secunia.com/advisories/33756 secunia.com
- http://secunia.com/advisories/33854 secunia.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 wiki.rpath.com
- http://www.debian.org/security/2008/dsa-1681 www.debian.org
- http://www.redhat.com/support/errata/RHSA-2009-0053.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2009-0225.html www.redhat.com
- http://www.securityfocus.com/archive/1/499044/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33503 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-715-1 www.ubuntu.com
- https://issues.rpath.com/browse/RPL-2915 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584 oval.cisecurity.org
- https://usn.ubuntu.com/714-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html www.redhat.com
- http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc5 kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html lists.opensuse.org
- http://secunia.com/advisories/32998 secunia.com
- http://secunia.com/advisories/33083 secunia.com
- http://secunia.com/advisories/33348 secunia.com
- http://secunia.com/advisories/33623 secunia.com
- http://secunia.com/advisories/33641 secunia.com
- http://secunia.com/advisories/33704 secunia.com
- http://secunia.com/advisories/33706 secunia.com
- http://secunia.com/advisories/33756 secunia.com
- http://secunia.com/advisories/33854 secunia.com
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332 wiki.rpath.com
- http://www.debian.org/security/2008/dsa-1681 www.debian.org
- http://www.redhat.com/support/errata/RHSA-2009-0053.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2009-0225.html www.redhat.com
- http://www.securityfocus.com/archive/1/499044/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33503 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-715-1 www.ubuntu.com
- https://issues.rpath.com/browse/RPL-2915 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10584 oval.cisecurity.org
- https://usn.ubuntu.com/714-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html www.redhat.com