CVE-2008-5300

Published: Dec 1, 2008Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.

Affected (6)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.28
Linux Linux Kernel	Version 2.6.28 rc1
Linux Linux Kernel	Version 2.6.28 rc2
Linux Linux Kernel	Version 2.6.28 rc3
Linux Linux Kernel	Version 2.6.28 rc4
Linux Linux Kernel	Version 2.6.28 rc5

Related CWEs

CWE-399

References (60)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259

Source: cve@mitre.org

http://marc.info/?l=linux-netdev&m=122721862313564&w=2

Source: cve@mitre.org

http://marc.info/?l=linux-netdev&m=122765505415944&w=2

Source: cve@mitre.org

http://osvdb.org/50272

Source: cve@mitre.org

http://secunia.com/advisories/32913

Source: cve@mitre.org

http://secunia.com/advisories/32998

Source: cve@mitre.org

http://secunia.com/advisories/33083

Source: cve@mitre.org

http://secunia.com/advisories/33348

Source: cve@mitre.org

http://secunia.com/advisories/33556

Source: cve@mitre.org

http://secunia.com/advisories/33706

Source: cve@mitre.org

http://secunia.com/advisories/33756

Source: cve@mitre.org

http://secunia.com/advisories/33854

Source: cve@mitre.org

http://securityreason.com/securityalert/4673

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0332

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1681

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:032

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0014.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0053.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/499044/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/512019/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/32516

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-715-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=470201

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46943

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2915

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10283

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11427

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2009-1550.html

Source: cve@mitre.org

https://usn.ubuntu.com/714-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01358.html

Source: cve@mitre.org

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=473259