CVE-2008-0010: Input Validation
Published Feb 12, 2008
·Updated
The copyfromusermmapsem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations.
Affected Software
23 affected components
Linux Linux kernel=2.6.23.4
Linux Linux kernel=2.6.22.4
Linux Linux kernel=2.6.23.7
Linux Linux kernel=2.6.24-rc3
Linux Linux kernel=2.6.22.1
Linux Linux kernel=2.6.22
Linux Linux kernel=2.6.23.1
Linux Linux kernel=2.6.22.7
Linux Linux kernel=2.6.23-rc2
Linux Linux kernel=2.6.23.9
Linux Linux kernel=2.6.22.6
Linux Linux kernel=2.6.23.3
Linux Linux kernel=2.6.22.3
Linux Linux kernel=2.6.23-rc1
Linux Linux kernel=2.6.23.14
Linux Linux kernel=2.6.23
Linux Linux kernel=2.6.23.2
Linux Linux kernel=2.6.24-rc2
Linux Linux kernel=2.6.23.5
Linux Linux kernel=2.6.23.6
Linux Linux kernel=2.6.22-rc6
Linux Linux kernel=2.6.22.5
Linux Linux kernel=2.6.22.16
Event History
Feb 12, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Jan 11, 2024
Data Sourced
via Red Hat·09:49 PM
RemedyDescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2008-0010?
CVE-2008-0010 has a high severity rating due to its potential to allow local users to read arbitrary kernel memory.
2
How do I fix CVE-2008-0010?
To fix CVE-2008-0010, upgrade the Linux kernel to version 2.6.24.1 or later.
3
Which versions of the Linux kernel are affected by CVE-2008-0010?
CVE-2008-0010 affects Linux kernel versions 2.6.22 through 2.6.24.
4
Can CVE-2008-0010 be exploited remotely?
No, CVE-2008-0010 can only be exploited by local users on the affected systems.
5
What type of vulnerability is CVE-2008-0010?
CVE-2008-0010 is a memory access vulnerability that involves inadequate validation of user space pointers.