CVE-2008-1669

Published: May 8, 2008Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

Affected (304)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

304 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.0
Linux Linux Kernel	Version 2.6.0 test10
Linux Linux Kernel	Version 2.6.0 test11
Linux Linux Kernel	Version 2.6.0 test1
Linux Linux Kernel	Version 2.6.0 test2
Linux Linux Kernel	Version 2.6.0 test3
Linux Linux Kernel	Version 2.6.0 test4
Linux Linux Kernel	Version 2.6.0 test5
Linux Linux Kernel	Version 2.6.0 test6
Linux Linux Kernel	Version 2.6.0 test7
Linux Linux Kernel	Version 2.6.0 test8
Linux Linux Kernel	Version 2.6.0 test9
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.10 rc1
Linux Linux Kernel	Version 2.6.10 rc2
Linux Linux Kernel	Version 2.6.10 rc3
Linux Linux Kernel	Version 2.6.11.10
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.12
Linux Linux Kernel	Version 2.6.11.1
Linux Linux Kernel	Version 2.6.11.2
Linux Linux Kernel	Version 2.6.11.3
Linux Linux Kernel	Version 2.6.11.4
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11.9
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.11 rc1
Linux Linux Kernel	Version 2.6.11 rc2
Linux Linux Kernel	Version 2.6.11 rc3
Linux Linux Kernel	Version 2.6.11 rc4
Linux Linux Kernel	Version 2.6.11 rc5
Linux Linux Kernel	Version 2.6.11_rc1_bk6
Linux Linux Kernel	Version 2.6.12.12
Linux Linux Kernel	Version 2.6.12.1
Linux Linux Kernel	Version 2.6.12.22
Linux Linux Kernel	Version 2.6.12.2
Linux Linux Kernel	Version 2.6.12.3
Linux Linux Kernel	Version 2.6.12.4
Linux Linux Kernel	Version 2.6.12.5
Linux Linux Kernel	Version 2.6.12.6
Linux Linux Kernel	Version 2.6.12
Linux Linux Kernel	Version 2.6.12 rc1
Linux Linux Kernel	Version 2.6.12 rc2
Linux Linux Kernel	Version 2.6.12 rc3
Linux Linux Kernel	Version 2.6.12 rc4
Linux Linux Kernel	Version 2.6.12 rc5
Linux Linux Kernel	Version 2.6.12 rc6
Linux Linux Kernel	Version 2.6.13.1
Linux Linux Kernel	Version 2.6.13.2
Linux Linux Kernel	Version 2.6.13.3
Linux Linux Kernel	Version 2.6.13.4
Linux Linux Kernel	Version 2.6.13.5
Linux Linux Kernel	Version 2.6.13
Linux Linux Kernel	Version 2.6.13 rc1
Linux Linux Kernel	Version 2.6.13 rc2
Linux Linux Kernel	Version 2.6.13 rc3
Linux Linux Kernel	Version 2.6.13 rc4
Linux Linux Kernel	Version 2.6.13 rc5
Linux Linux Kernel	Version 2.6.13 rc6
Linux Linux Kernel	Version 2.6.13 rc7
Linux Linux Kernel	Version 2.6.14.1
Linux Linux Kernel	Version 2.6.14.2
Linux Linux Kernel	Version 2.6.14.3
Linux Linux Kernel	Version 2.6.14.4
Linux Linux Kernel	Version 2.6.14.5
Linux Linux Kernel	Version 2.6.14.6
Linux Linux Kernel	Version 2.6.14.7
Linux Linux Kernel	Version 2.6.14
Linux Linux Kernel	Version 2.6.14 rc1
Linux Linux Kernel	Version 2.6.14 rc2
Linux Linux Kernel	Version 2.6.14 rc3
Linux Linux Kernel	Version 2.6.14 rc4
Linux Linux Kernel	Version 2.6.14 rc5
Linux Linux Kernel	Version 2.6.15.11
Linux Linux Kernel	Version 2.6.15.1
Linux Linux Kernel	Version 2.6.15.2
Linux Linux Kernel	Version 2.6.15.3
Linux Linux Kernel	Version 2.6.15.4
Linux Linux Kernel	Version 2.6.15.5
Linux Linux Kernel	Version 2.6.15.6
Linux Linux Kernel	Version 2.6.15.7
Linux Linux Kernel	Version 2.6.15
Linux Linux Kernel	Version 2.6.15 rc1
Linux Linux Kernel	Version 2.6.15 rc2
Linux Linux Kernel	Version 2.6.15 rc3
Linux Linux Kernel	Version 2.6.15 rc4
Linux Linux Kernel	Version 2.6.15 rc5
Linux Linux Kernel	Version 2.6.15 rc6
Linux Linux Kernel	Version 2.6.15 rc7
Linux Linux Kernel	Version 2.6.16.10
Linux Linux Kernel	Version 2.6.16.11
Linux Linux Kernel	Version 2.6.16.12
Linux Linux Kernel	Version 2.6.16.13
Linux Linux Kernel	Version 2.6.16.14
Linux Linux Kernel	Version 2.6.16.15
Linux Linux Kernel	Version 2.6.16.16
Linux Linux Kernel	Version 2.6.16.17
Linux Linux Kernel	Version 2.6.16.18
Linux Linux Kernel	Version 2.6.16.19
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.20
Linux Linux Kernel	Version 2.6.16.21
Linux Linux Kernel	Version 2.6.16.22
Linux Linux Kernel	Version 2.6.16.23
Linux Linux Kernel	Version 2.6.16.24
Linux Linux Kernel	Version 2.6.16.25
Linux Linux Kernel	Version 2.6.16.26
Linux Linux Kernel	Version 2.6.16.27
Linux Linux Kernel	Version 2.6.16.28
Linux Linux Kernel	Version 2.6.16.29
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.30
Linux Linux Kernel	Version 2.6.16.31
Linux Linux Kernel	Version 2.6.16.32
Linux Linux Kernel	Version 2.6.16.33
Linux Linux Kernel	Version 2.6.16.34
Linux Linux Kernel	Version 2.6.16.35
Linux Linux Kernel	Version 2.6.16.36
Linux Linux Kernel	Version 2.6.16.37
Linux Linux Kernel	Version 2.6.16.38
Linux Linux Kernel	Version 2.6.16.39
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.40
Linux Linux Kernel	Version 2.6.16.41
Linux Linux Kernel	Version 2.6.16.43
Linux Linux Kernel	Version 2.6.16.44
Linux Linux Kernel	Version 2.6.16.45
Linux Linux Kernel	Version 2.6.16.46
Linux Linux Kernel	Version 2.6.16.47
Linux Linux Kernel	Version 2.6.16.48
Linux Linux Kernel	Version 2.6.16.49
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16.50
Linux Linux Kernel	Version 2.6.16.51
Linux Linux Kernel	Version 2.6.16.52
Linux Linux Kernel	Version 2.6.16.53
Linux Linux Kernel	Version 2.6.16.5
Linux Linux Kernel	Version 2.6.16.6
Linux Linux Kernel	Version 2.6.16.7
Linux Linux Kernel	Version 2.6.16.8
Linux Linux Kernel	Version 2.6.16.9
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.16 rc1
Linux Linux Kernel	Version 2.6.16 rc2
Linux Linux Kernel	Version 2.6.16 rc3
Linux Linux Kernel	Version 2.6.16 rc4
Linux Linux Kernel	Version 2.6.16 rc5
Linux Linux Kernel	Version 2.6.16 rc6
Linux Linux Kernel	Version 2.6.16_rc7
Linux Linux Kernel	Version 2.6.17.10
Linux Linux Kernel	Version 2.6.17.11
Linux Linux Kernel	Version 2.6.17.12
Linux Linux Kernel	Version 2.6.17.13
Linux Linux Kernel	Version 2.6.17.14
Linux Linux Kernel	Version 2.6.17.1
Linux Linux Kernel	Version 2.6.17.2
Linux Linux Kernel	Version 2.6.17.3
Linux Linux Kernel	Version 2.6.17.4
Linux Linux Kernel	Version 2.6.17.5
Linux Linux Kernel	Version 2.6.17.6
Linux Linux Kernel	Version 2.6.17.7
Linux Linux Kernel	Version 2.6.17.8
Linux Linux Kernel	Version 2.6.17.9
Linux Linux Kernel	Version 2.6.17
Linux Linux Kernel	Version 2.6.17 rc1
Linux Linux Kernel	Version 2.6.17 rc2
Linux Linux Kernel	Version 2.6.17 rc3
Linux Linux Kernel	Version 2.6.17 rc4
Linux Linux Kernel	Version 2.6.17 rc5
Linux Linux Kernel	Version 2.6.17 rc6
Linux Linux Kernel	Version 2.6.18.1
Linux Linux Kernel	Version 2.6.18.2
Linux Linux Kernel	Version 2.6.18.3
Linux Linux Kernel	Version 2.6.18.4
Linux Linux Kernel	Version 2.6.18.5
Linux Linux Kernel	Version 2.6.18.6
Linux Linux Kernel	Version 2.6.18.7
Linux Linux Kernel	Version 2.6.18.8
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.19.1
Linux Linux Kernel	Version 2.6.19.2
Linux Linux Kernel	Version 2.6.19.3
Linux Linux Kernel	Version 2.6.19
Linux Linux Kernel	Version 2.6.19 rc1
Linux Linux Kernel	Version 2.6.19 rc2
Linux Linux Kernel	Version 2.6.19 rc3
Linux Linux Kernel	Version 2.6.19 rc4
Linux Linux Kernel	Version 2.6.1
Linux Linux Kernel	Version 2.6.1 rc1
Linux Linux Kernel	Version 2.6.1 rc2
Linux Linux Kernel	Version 2.6.1 rc3
Linux Linux Kernel	Version 2.6.20.10
Linux Linux Kernel	Version 2.6.20.11
Linux Linux Kernel	Version 2.6.20.12
Linux Linux Kernel	Version 2.6.20.13
Linux Linux Kernel	Version 2.6.20.14
Linux Linux Kernel	Version 2.6.20.15
Linux Linux Kernel	Version 2.6.20.1
Linux Linux Kernel	Version 2.6.20.2
Linux Linux Kernel	Version 2.6.20.3
Linux Linux Kernel	Version 2.6.20.4
Linux Linux Kernel	Version 2.6.20.5
Linux Linux Kernel	Version 2.6.20.6
Linux Linux Kernel	Version 2.6.20.7
Linux Linux Kernel	Version 2.6.20.8
Linux Linux Kernel	Version 2.6.20.9
Linux Linux Kernel	Version 2.6.20
Linux Linux Kernel	Version 2.6.20 rc2
Linux Linux Kernel	Version 2.6.21.1
Linux Linux Kernel	Version 2.6.21.2
Linux Linux Kernel	Version 2.6.21.3
Linux Linux Kernel	Version 2.6.21.4
Linux Linux Kernel	Version 2.6.21
Linux Linux Kernel	Version 2.6.21 git1
Linux Linux Kernel	Version 2.6.21 git2
Linux Linux Kernel	Version 2.6.21 git3
Linux Linux Kernel	Version 2.6.21 git4
Linux Linux Kernel	Version 2.6.21 git5
Linux Linux Kernel	Version 2.6.21 git6
Linux Linux Kernel	Version 2.6.21 git7
Linux Linux Kernel	Version 2.6.21 rc3
Linux Linux Kernel	Version 2.6.21 rc4
Linux Linux Kernel	Version 2.6.21 rc5
Linux Linux Kernel	Version 2.6.21 rc6
Linux Linux Kernel	Version 2.6.21 rc7
Linux Linux Kernel	Version 2.6.22.16
Linux Linux Kernel	Version 2.6.22.1
Linux Linux Kernel	Version 2.6.22.3
Linux Linux Kernel	Version 2.6.22.4
Linux Linux Kernel	Version 2.6.22.5
Linux Linux Kernel	Version 2.6.22.6
Linux Linux Kernel	Version 2.6.22.7
Linux Linux Kernel	Version 2.6.22
Linux Linux Kernel	Version 2.6.22 rc6
Linux Linux Kernel	Version 2.6.23.14
Linux Linux Kernel	Version 2.6.23.1
Linux Linux Kernel	Version 2.6.23.2
Linux Linux Kernel	Version 2.6.23.3
Linux Linux Kernel	Version 2.6.23.4
Linux Linux Kernel	Version 2.6.23.5
Linux Linux Kernel	Version 2.6.23.6
Linux Linux Kernel	Version 2.6.23.7
Linux Linux Kernel	Version 2.6.23.9
Linux Linux Kernel	Version 2.6.23
Linux Linux Kernel	Version 2.6.23 rc1
Linux Linux Kernel	Version 2.6.23 rc2
Linux Linux Kernel	Version 2.6.24.1
Linux Linux Kernel	Version 2.6.24.2
Linux Linux Kernel	Version 2.6.24.3
Linux Linux Kernel	Version 2.6.24.4
Linux Linux Kernel	Version 2.6.24.5
Linux Linux Kernel	Version 2.6.24
Linux Linux Kernel	Version 2.6.24 rc2
Linux Linux Kernel	Version 2.6.24 rc3
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.2 rc1
Linux Linux Kernel	Version 2.6.2 rc2
Linux Linux Kernel	Version 2.6.2 rc3
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.3 rc1
Linux Linux Kernel	Version 2.6.3 rc2
Linux Linux Kernel	Version 2.6.3 rc3
Linux Linux Kernel	Version 2.6.3 rc4
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.4 rc1
Linux Linux Kernel	Version 2.6.4 rc2
Linux Linux Kernel	Version 2.6.4 rc3
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.5 rc1
Linux Linux Kernel	Version 2.6.5 rc2
Linux Linux Kernel	Version 2.6.5 rc3
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.6 rc1
Linux Linux Kernel	Version 2.6.6 rc2
Linux Linux Kernel	Version 2.6.6 rc3
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.7 rc1
Linux Linux Kernel	Version 2.6.7 rc2
Linux Linux Kernel	Version 2.6.7 rc3
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.8 rc1
Linux Linux Kernel	Version 2.6.8 rc2
Linux Linux Kernel	Version 2.6.8 rc3
Linux Linux Kernel	Version 2.6.8 rc4
Linux Linux Kernel	Version 2.6.9
Linux Linux Kernel	Version 2.6.9 rc1
Linux Linux Kernel	Version 2.6.9 rc2
Linux Linux Kernel	Version 2.6.9 rc3
Linux Linux Kernel	Version 2.6.9 rc4
Linux Linux Kernel	Version 2.6_test9_cvs

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (90)

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2008/000023.html

Source: secalert@redhat.com

http://secunia.com/advisories/30077

Source: secalert@redhat.com

http://secunia.com/advisories/30101

Source: secalert@redhat.com

http://secunia.com/advisories/30108

Source: secalert@redhat.com

http://secunia.com/advisories/30110

Source: secalert@redhat.com

http://secunia.com/advisories/30112

Source: secalert@redhat.com

http://secunia.com/advisories/30116

Source: secalert@redhat.com

http://secunia.com/advisories/30164

Source: secalert@redhat.com

http://secunia.com/advisories/30252

Source: secalert@redhat.com

http://secunia.com/advisories/30260

Source: secalert@redhat.com

http://secunia.com/advisories/30276

Source: secalert@redhat.com

http://secunia.com/advisories/30515

Source: secalert@redhat.com

http://secunia.com/advisories/30769

Source: secalert@redhat.com

http://secunia.com/advisories/30818

Source: secalert@redhat.com

http://secunia.com/advisories/30962

Source: secalert@redhat.com

http://secunia.com/advisories/30982

Source: secalert@redhat.com

http://secunia.com/advisories/31246

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1575

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:104

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:167

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0211.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0233.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0237.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/491740/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/29076

Source: secalert@redhat.com

Patch

http://www.securitytracker.com/id?1019974

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-618-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1451/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1452/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2222/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/42242

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2518

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065

Source: secalert@redhat.com

https://usn.ubuntu.com/614-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html