Published: 13/01/2009 Updated: 13/02/2023

CVSS v2 Base Score: 4 | Impact Score: 6.9 | Exploitability Score: 1.9

VMScore: 356

Vector: AV:L/AC:H/Au:N/C:N/I:N/A:C

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel prior to 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.25.4
linux linux kernel 2.6.25.11
linux linux kernel 2.6.18
linux linux kernel 2.6.25.9
linux linux kernel 2.6.22.15
linux linux kernel 2.6.24.7
linux linux kernel 2.6.23.13
linux linux kernel 2.6.24.2
linux linux kernel 2.4.36.6
linux linux kernel 2.6.22.21
linux linux kernel 2.6.25.12
linux linux kernel 2.6.25.5
linux linux kernel 2.6.23.8
linux linux kernel 2.6.25
linux linux kernel 2.6.22.12
linux linux kernel 2.6.25.8
linux linux kernel 2.6.21.6
linux linux kernel 2.4.36.2
linux linux kernel 2.6.22.1
linux linux kernel 2.6.23.16
linux linux kernel 2.6.24.1
linux linux kernel 2.6.25.6
linux linux kernel 2.6.22
linux linux kernel 2.6.20.16
linux linux kernel 2.6.19.4
linux linux kernel 2.6.25.13
linux linux kernel 2.6.20.21
linux linux kernel 2.6.25.7
linux linux kernel 2.4.36.1
linux linux kernel 2.6.25.3
linux linux kernel 2.6.24
linux linux kernel 2.6.20.17
linux linux kernel 2.6.21.5
linux linux kernel 2.6.25.15
linux linux kernel 2.6.24_rc4
linux linux kernel 2.6.23.15
linux linux kernel 2.6.23.10
linux linux kernel 2.4.36.4
linux linux kernel 2.6.20.20
linux linux kernel 2.6.22.18
linux linux kernel 2.4.36.3
linux linux kernel 2.6.22.20
linux linux kernel 2.6.20.18
linux linux kernel 2.6.23.9
linux linux kernel 2.6.25.2
linux linux kernel 2.6.25.1
linux linux kernel 2.6.24.4
linux linux kernel 2.6.25.16
linux linux kernel 2.6.22.9
linux linux kernel 2.6.25.17
linux linux kernel 2.6.22.13
linux linux kernel 2.6.19.7
linux linux kernel 2.6.24.5
linux linux kernel 2.6.24_rc1
linux linux kernel 2.6.20.19
linux linux kernel 2.6.22.17
linux linux kernel 2.6.25.10
linux linux kernel 2.6.22.11
linux linux kernel 2.6.23
linux linux kernel 2.6.22.10
linux linux kernel 2.6.23.17
linux linux kernel 2.6.21.7
linux linux kernel 2.6.23_rc1
linux linux kernel 2.6.22.22
linux linux kernel 2.6.24.6
linux linux kernel 2.6.22_rc7
linux linux kernel 2.4.36
linux linux kernel 2.6.23.12
linux linux kernel 2.6.24_rc5
linux linux kernel 2.6.19.6
linux linux kernel 2.6.22.8
linux linux kernel 2.6.19.5
linux linux kernel 2.4.36.5
linux linux kernel 2.6.22.2
linux linux kernel 2.2.27
linux linux kernel 2.6.22.19
linux linux kernel 2.6.24.3
linux linux kernel 2.6.22_rc1
linux linux kernel 2.6.25.14
linux linux kernel 2.6.23.11
linux linux kernel 2.6.22.14
linux linux kernel 2.6
linux linux kernel

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues and various bugsare now available for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Secur ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues and several bugsare now available for Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Secur ...

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service (CVE-2008-4307) ...

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service Ubuntu 810 was not affected (CVE-2008-4307) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-4307 Bryn M Reeves reported a denial of service in the NFS filesystem Local users can trigger a kernel BUG() due to a r ...

CWE-362 https://bugzilla.redhat.com/show_bug.cgi?id=456282 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26 http://openwall.com/lists/oss-security/2009/01/13/1 http://www.ubuntu.com/usn/usn-751-1 http://www.redhat.com/support/errata/RHSA-2009-0451.html http://secunia.com/advisories/34917 http://rhn.redhat.com/errata/RHSA-2009-0459.html http://secunia.com/advisories/34981 http://www.debian.org/security/2009/dsa-1787 http://secunia.com/advisories/34962 http://www.debian.org/security/2009/dsa-1794 http://secunia.com/advisories/35011 http://secunia.com/advisories/35015 http://rhn.redhat.com/errata/RHSA-2009-0473.html http://www.vupen.com/english/advisories/2009/3316 http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://secunia.com/advisories/37471 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9233 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7728 http://www.securityfocus.com/archive/1/507985/100/0/threaded http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=c4d7c402b788b73dc24f1e54a57f89d3dc5eb7bc https://access.redhat.com/errata/RHSA-2009:0459 https://nvd.nist.gov https://usn.ubuntu.com/752-1/

CVE-2008-4307

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect