CVE-2008-5029

Published: Nov 10, 2008Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.

Affected (114)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

114 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.27.4
Linux Linux Kernel	Version 2.2.27
Linux Linux Kernel	Version 2.4.36.1
Linux Linux Kernel	Version 2.4.36.2
Linux Linux Kernel	Version 2.4.36.3
Linux Linux Kernel	Version 2.4.36.4
Linux Linux Kernel	Version 2.4.36.5
Linux Linux Kernel	Version 2.4.36.6
Linux Linux Kernel	Version 2.4.36
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.20.16
Linux Linux Kernel	Version 2.6.20.17
Linux Linux Kernel	Version 2.6.20.18
Linux Linux Kernel	Version 2.6.20.19
Linux Linux Kernel	Version 2.6.20.20
Linux Linux Kernel	Version 2.6.20.21
Linux Linux Kernel	Version 2.6.21.5
Linux Linux Kernel	Version 2.6.21.6
Linux Linux Kernel	Version 2.6.21.7
Linux Linux Kernel	Version 2.6.22.10
Linux Linux Kernel	Version 2.6.22.11
Linux Linux Kernel	Version 2.6.22.12
Linux Linux Kernel	Version 2.6.22.13
Linux Linux Kernel	Version 2.6.22.14
Linux Linux Kernel	Version 2.6.22.15
Linux Linux Kernel	Version 2.6.22.17
Linux Linux Kernel	Version 2.6.22.18
Linux Linux Kernel	Version 2.6.22.19
Linux Linux Kernel	Version 2.6.22.1
Linux Linux Kernel	Version 2.6.22.20
Linux Linux Kernel	Version 2.6.22.21
Linux Linux Kernel	Version 2.6.22.22
Linux Linux Kernel	Version 2.6.22.2
Linux Linux Kernel	Version 2.6.22.8
Linux Linux Kernel	Version 2.6.22.9
Linux Linux Kernel	Version 2.6.22
Linux Linux Kernel	Version 2.6.22_rc1
Linux Linux Kernel	Version 2.6.22_rc7
Linux Linux Kernel	Version 2.6.23.10
Linux Linux Kernel	Version 2.6.23.11
Linux Linux Kernel	Version 2.6.23.12
Linux Linux Kernel	Version 2.6.23.13
Linux Linux Kernel	Version 2.6.23.15
Linux Linux Kernel	Version 2.6.23.16
Linux Linux Kernel	Version 2.6.23.17
Linux Linux Kernel	Version 2.6.23.8
Linux Linux Kernel	Version 2.6.23.9
Linux Linux Kernel	Version 2.6.23
Linux Linux Kernel	Version 2.6.23_rc1
Linux Linux Kernel	Version 2.6.24.1
Linux Linux Kernel	Version 2.6.24.2
Linux Linux Kernel	Version 2.6.24.3
Linux Linux Kernel	Version 2.6.24.4
Linux Linux Kernel	Version 2.6.24.5
Linux Linux Kernel	Version 2.6.24.6
Linux Linux Kernel	Version 2.6.24.7
Linux Linux Kernel	Version 2.6.24
Linux Linux Kernel	Version 2.6.24_rc1
Linux Linux Kernel	Version 2.6.24_rc4
Linux Linux Kernel	Version 2.6.24_rc5
Linux Linux Kernel	Version 2.6.25.10
Linux Linux Kernel	Version 2.6.25.10
Linux Linux Kernel	Version 2.6.25.11
Linux Linux Kernel	Version 2.6.25.11
Linux Linux Kernel	Version 2.6.25.12
Linux Linux Kernel	Version 2.6.25.12
Linux Linux Kernel	Version 2.6.25.13
Linux Linux Kernel	Version 2.6.25.14
Linux Linux Kernel	Version 2.6.25.15
Linux Linux Kernel	Version 2.6.25.16
Linux Linux Kernel	Version 2.6.25.17
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25.9
Linux Linux Kernel	Version 2.6.25.9
Linux Linux Kernel	Version 2.6.25
Linux Linux Kernel	Version 2.6.25
Linux Linux Kernel	Version 2.6.26.1
Linux Linux Kernel	Version 2.6.26.2
Linux Linux Kernel	Version 2.6.26.3
Linux Linux Kernel	Version 2.6.26.4
Linux Linux Kernel	Version 2.6.26.5
Linux Linux Kernel	Version 2.6.26
Linux Linux Kernel	Version 2.6.26 rc4
Linux Linux Kernel	Version 2.6.27.1
Linux Linux Kernel	Version 2.6.27.2
Linux Linux Kernel	Version 2.6.27.3
Linux Linux Kernel	Version 2.6.27
Linux Linux Kernel	Version 2.6

References (72)

http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html

Source: cve@mitre.org

http://darkircop.org/unix.c

Source: cve@mitre.org

Exploit

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.9

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

Source: cve@mitre.org

http://marc.info/?l=linux-netdev&m=122593044330973&w=2

Source: cve@mitre.org

http://secunia.com/advisories/32918

Source: cve@mitre.org

http://secunia.com/advisories/32998

Source: cve@mitre.org

http://secunia.com/advisories/33180

Source: cve@mitre.org

http://secunia.com/advisories/33556

Source: cve@mitre.org

http://secunia.com/advisories/33586

Source: cve@mitre.org

http://secunia.com/advisories/33623

Source: cve@mitre.org

http://secunia.com/advisories/33641

Source: cve@mitre.org

http://secunia.com/advisories/33704

Source: cve@mitre.org

http://securityreason.com/securityalert/4573

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1681

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1687

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:234

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/11/06/1

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0009.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0014.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0225.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499700/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499744/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/512019/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32154

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/33079

Source: cve@mitre.org

http://www.securitytracker.com/id?1021292

Source: cve@mitre.org

http://www.securitytracker.com/id?1021511

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-679-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=470201

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46538

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11694

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9558

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2009-1550.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2009-01/0006.html