CVE-2008-1375

Published: May 2, 2008Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.

Affected (14)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Opensuse: Opensuse · +3 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · Debian: Debian Linux · Fedoraproject: Fedora

1 product

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.0 to 2.6.24.6
Linux Linux Kernel	Version 2.6.25

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.2
Opensuse Opensuse	Version 10.3
Suse Linux Enterprise Desktop	Version 10 sp1
Suse Linux Enterprise Server	Version 10 sp1
Suse Linux Enterprise Server	Version 9
Suse Linux Enterprise Software Development Kit	Version 10 sp1

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 8

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (90)

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.vmware.com/pipermail/security-announce/2008/000023.html

Source: secalert@redhat.com

Third Party Advisory

http://marc.info/?l=linux-kernel&m=120967963803205&w=2

Source: secalert@redhat.com

PatchThird Party Advisory

http://marc.info/?l=linux-kernel&m=120967964303224&w=2

Source: secalert@redhat.com

PatchThird Party Advisory

http://secunia.com/advisories/30017

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30018

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30044

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30108

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30110

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30112

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30116

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30260

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30515

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30769

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30818

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30890

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30962

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31246

Source: secalert@redhat.com

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2008-0157

Source: secalert@redhat.com

Broken Link

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0157

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2008/dsa-1565

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6

Source: secalert@redhat.com

Broken Link

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2008:104

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0211.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0233.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0237.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/491566/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/491732/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/29003

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1019959

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-618-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1406/references

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1452/references

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/2222/references

Source: secalert@redhat.com

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/42131

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-2501

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/614-1/

Source: secalert@redhat.com

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html