CVE-2008-0731: High severity linux kernel vulnerability
The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor changehat system call, which might allow attackers to trigger the unconfining of an apparmored task.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0731?
CVE-2008-0731 is considered a high-severity vulnerability due to its potential to allow an attacker to unconfin a restricted apparmored task.
How do I fix CVE-2008-0731?
To mitigate CVE-2008-0731, upgrade the Linux kernel to version 2.6.18.8-0.8 or later in affected openSUSE installations.
What type of attack can exploit CVE-2008-0731?
CVE-2008-0731 can be exploited by attackers aiming to bypass the AppArmor confinement mechanism, potentially leading to unauthorized access.
Which versions of SUSE are affected by CVE-2008-0731?
CVE-2008-0731 affects openSUSE 10.2 systems running the Linux kernel prior to version 2.6.18.8-0.8.
Is AppArmor itself vulnerable in relation to CVE-2008-0731?
AppArmor is not vulnerable itself, but the failure to properly handle the change_hat system call in the Linux kernel leads to issues.