CVE-2008-2372

Published: Jul 2, 2008Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."

Affected (10)

Products: Linux: Linux Kernel

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.24
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (40)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

Source: secalert@redhat.com

http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html

Source: secalert@redhat.com

http://secunia.com/advisories/30901

Source: secalert@redhat.com

http://secunia.com/advisories/30982

Source: secalert@redhat.com

http://secunia.com/advisories/31202

Source: secalert@redhat.com

http://secunia.com/advisories/31628

Source: secalert@redhat.com

http://secunia.com/advisories/32393

Source: secalert@redhat.com

http://secunia.com/advisories/32485

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0585.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0957.html

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-659-1

Source: secalert@redhat.com

http://www.ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/43550

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2629

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=89f5b7da2a6bad2e84670422ab8192382a5aeb9f

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30901

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30982

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31202

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31628

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32393

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32485

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0585.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0957.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-659-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ussg.iu.edu/hypermail/linux/kernel/0804.3/3203.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/43550

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2629

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9383

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.