CVE-2008-0600: Code Injection
A new system call named vmsplice() was introduced in the 2.6.17 release of the Linux kernel.
COSEINC reported two issues affecting vmsplice, CVE-2008-0009 and CVE-2008-0010.
On Saturday 20080210 a public exploit was released that utilised a similar flaw in vmsplice (vmsplicetopipe function) to allow a local user to gain privileges on some architectures.
See also http://marc.info/?t=120263655300003&r=1&w=2
This issue will affect kernels 2.6.17+ and therefore affected Red Hat Enterprise Linux 5, but not Red Hat Enterprise Linux 4, 3, or 2.1.
Other sources
The vmsplicetopipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer before dereference, which allows local users to gain root privileges via crafted arguments in a vmsplice system call, a different vulnerability than CVE-2008-0009 and CVE-2008-0010.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0600?
The severity of CVE-2008-0600 is considered high due to the potential for local users to gain root privileges.
How do I fix CVE-2008-0600?
To fix CVE-2008-0600, upgrade the Linux kernel to version 2.6.24.2 or later.
Which versions of the Linux kernel are affected by CVE-2008-0600?
CVE-2008-0600 affects Linux kernel versions 2.6.17 through 2.6.24.1.
Is CVE-2008-0600 a local or remote vulnerability?
CVE-2008-0600 is a local vulnerability that can be exploited by users with local access.
What type of attack does CVE-2008-0600 enable?
CVE-2008-0600 enables local users to execute arbitrary code with elevated privileges, potentially leading to full system compromise.