CVE-2008-1669: Race Condition

Published May 8, 2008

Updated

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

Affected Software

304 affected components

Linux Linux kernel=2.6.11-rc3

Linux Linux kernel=2.6.20.6

Linux Linux kernel=2.6.4-rc3

Linux Linux kernel=2.6.17-rc6

Linux Linux kernel=2.6.20.9

Linux Linux kernel=2.6.18-rc3

Linux Linux kernel=2.6.11

Linux Linux kernel=2.6.23.4

Linux Linux kernel=2.6.16.16

Linux Linux kernel=2.6.20-rc2

Linux Linux kernel=2.6.18.7

Linux Linux kernel=2.6.17.12

Linux Linux kernel=2.6.16.39

Linux Linux kernel=2.6.21

Linux Linux kernel=2.6.21-git3

Linux Linux kernel=2.6.16.9

Linux Linux kernel=2.6.12-rc1

Linux Linux kernel=2.6.12-rc4

Linux Linux kernel=2.6.17.9

Linux Linux kernel=2.6.12.12

Linux Linux kernel=2.6.19-rc4

Linux Linux kernel=2.6.14-rc2

Linux Linux kernel=2.6.4-rc1

Linux Linux kernel=2.6.11.2

Linux Linux kernel=2.6.5

Linux Linux kernel=2.6.15.3

Linux Linux kernel=2.6.21-git5

Linux Linux kernel=2.6.11.10

Linux Linux kernel=2.6.10-rc3

Linux Linux kernel=2.6.13-rc5

Linux Linux kernel=2.6.1

Linux Linux kernel=2.6.16.43

Linux Linux kernel=2.6.21-git4

Linux Linux kernel=2.6.16.6

Linux Linux kernel=2.6.16.8

Linux Linux kernel=2.6.16-rc6

Linux Linux kernel=2.6.20.13

Linux Linux kernel=2.6.21-rc5

Linux Linux kernel=2.6.22.4

Linux Linux kernel=2.6.7-rc3

Linux Linux kernel=2.6.14.7

Linux Linux kernel=2.6.18-rc2

Linux Linux kernel=2.6.16-rc1

Linux Linux kernel=2.6.3-rc2

Linux Linux kernel=2.6.13

Linux Linux kernel=2.6.17.2

Linux Linux kernel=2.6.15-rc4

Linux Linux kernel=2.6.13.3

Linux Linux kernel=2.6.11.8

Linux Linux kernel=2.6.24.2

Linux Linux kernel=2.6.18-rc5

Linux Linux kernel=2.6.21-rc7

Linux Linux kernel=2.6.21-rc4

Linux Linux kernel=2.6.16.34

Linux Linux kernel=2.6.18-rc4

Linux Linux kernel=2.6.11_rc1_bk6

Linux Linux kernel=2.6.23.7

Linux Linux kernel=2.6.17.8

Linux Linux kernel=2.6.14.4

Linux Linux kernel=2.6.14

Linux Linux kernel=2.6.17.4

Linux Linux kernel=2.6.16.18

Linux Linux kernel=2.6.17.14

Linux Linux kernel=2.6.10

Linux Linux kernel=2.6.13-rc1

Linux Linux kernel=2.6.16.45

Linux Linux kernel=2.6.14.3

Linux Linux kernel=2.6.13-rc6

Linux Linux kernel=2.6.24-rc3

Linux Linux kernel=2.6.18.3

Linux Linux kernel=2.6.16.37

Linux Linux kernel=2.6.11.6

Linux Linux kernel=2.6.16.48

Linux Linux kernel=2.6.11.11

Linux Linux kernel=2.6.0-test5

Linux Linux kernel=2.6.16.13

Linux Linux kernel=2.6.3

Linux Linux kernel=2.6.13-rc7

Linux Linux kernel=2.6.0-test2

Linux Linux kernel=2.6.22.1

Linux Linux kernel=2.6.9-rc1

Linux Linux kernel=2.6.16.4

Linux Linux kernel=2.6.17.3

Linux Linux kernel=2.6.24.1

Linux Linux kernel=2.6.20.5

Linux Linux kernel=2.6.22

Linux Linux kernel=2.6.4

Linux Linux kernel=2.6.16.15

Linux Linux kernel=2.6_test9_cvs

Linux Linux kernel=2.6.13-rc2

Linux Linux kernel=2.6.15.6

Linux Linux kernel=2.6.15.1

Linux Linux kernel=2.6.11.5

Linux Linux kernel=2.6.7-rc1

Linux Linux kernel=2.6.9-rc3

Linux Linux kernel=2.6.19.3

Linux Linux kernel=2.6.15-rc5

Linux Linux kernel=2.6.19.1

Linux Linux kernel=2.6.18.4

Linux Linux kernel=2.6.16.1

Linux Linux kernel=2.6.18.1

Linux Linux kernel=2.6.8-rc4

Linux Linux kernel=2.6.23.1

Linux Linux kernel=2.6.2

Linux Linux kernel=2.6.6-rc3

Linux Linux kernel=2.6.14.5

Linux Linux kernel=2.6.13.2

Linux Linux kernel=2.6.12-rc5

Linux Linux kernel=2.6.1-rc3

Linux Linux kernel=2.6.8-rc1

Linux Linux kernel=2.6.0-test11

Linux Linux kernel=2.6.17.5

Linux Linux kernel=2.6.14-rc3

Linux Linux kernel=2.6.2-rc3

Linux Linux kernel=2.6.8.1.5

Linux Linux kernel=2.6.18.5

Linux Linux kernel=2.6.4-rc2

Linux Linux kernel=2.6.21.1

Linux Linux kernel=2.6.16.32

Linux Linux kernel=2.6.13.5

Linux Linux kernel=2.6.16.49

Linux Linux kernel=2.6.17

Linux Linux kernel=2.6.24

Linux Linux kernel=2.6.12-rc2

Linux Linux kernel=2.6.1-rc2

Linux Linux kernel=2.6.19.2

Linux Linux kernel=2.6.21.4

Linux Linux kernel=2.6.11-rc4

Linux Linux kernel=2.6.16.11

Linux Linux kernel=2.6.21-git2

Linux Linux kernel=2.6.16.14

Linux Linux kernel=2.6.20.12

Linux Linux kernel=2.6.16.25

Linux Linux kernel=2.6.15-rc3

Linux Linux kernel=2.6.16.21

Linux Linux kernel=2.6.16.33

Linux Linux kernel=2.6.8

Linux Linux kernel=2.6.16.28

Linux Linux kernel=2.6.17.10

Linux Linux kernel=2.6.3-rc3

Linux Linux kernel=2.6.15.11

Linux Linux kernel=2.6.14.1

Linux Linux kernel=2.6.19-rc1

Linux Linux kernel=2.6.16.23

Linux Linux kernel=2.6.0-test1

Linux Linux kernel=2.6.16-rc5

Linux Linux kernel=2.6.12.5

Linux Linux kernel=2.6.15.7

Linux Linux kernel=2.6.20

Linux Linux kernel=2.6.7-rc2

Linux Linux kernel=2.6.22.7

Linux Linux kernel=2.6.16.3

Linux Linux kernel=2.6.0-test6

Linux Linux kernel=2.6.17-rc3

Linux Linux kernel=2.6.12-rc3

Linux Linux kernel=2.6.15-rc2

Linux Linux kernel=2.6.16.36

Linux Linux kernel=2.6.14.6

Linux Linux kernel=2.6.12.1

Linux Linux kernel=2.6.11.9

Linux Linux kernel=2.6.10-rc2

Linux Linux kernel=2.6.16.46

Linux Linux kernel=2.6.17.1

Linux Linux kernel=2.6.20.8

Linux Linux kernel=2.6.0-test4

Linux Linux kernel=2.6.21-rc6

Linux Linux kernel=2.6.20.15

Linux Linux kernel=2.6.2-rc1

Linux Linux kernel=2.6.0

Linux Linux kernel=2.6.16-rc4

Linux Linux kernel=2.6.5-rc1

Linux Linux kernel=2.6.21-git7

Linux Linux kernel=2.6.13.4

Linux Linux kernel=2.6.23-rc2

Linux Linux kernel=2.6.17-rc1

Linux Linux kernel=2.6.23.9

Linux Linux kernel=2.6.17-rc2

Linux Linux kernel=2.6.22.6

Linux Linux kernel=2.6.23.3

Linux Linux kernel=2.6.18.8

Linux Linux kernel=2.6.22.3

Linux Linux kernel=2.6.12.2

Linux Linux kernel=2.6.16.31

Linux Linux kernel=2.6.16.26

Linux Linux kernel=2.6.11-rc1

Linux Linux kernel=2.6.18.2

Linux Linux kernel=2.6.16.29

Linux Linux kernel=2.6.23-rc1

Linux Linux kernel=2.6.24.4

Linux Linux kernel=2.6.14-rc1

Linux Linux kernel=2.6.6-rc2

Linux Linux kernel=2.6.20.11

Linux Linux kernel=2.6.9-rc2

Linux Linux kernel=2.6.19

Linux Linux kernel=2.6.20.3

Linux Linux kernel=2.6.16

Linux Linux kernel=2.6.21.3

Linux Linux kernel=2.6.24.5

Linux Linux kernel=2.6.0-test10

Linux Linux kernel=2.6.16.51

Linux Linux kernel=2.6.15.2

Linux Linux kernel=2.6.16.22

Linux Linux kernel=2.6.16.40

Linux Linux kernel=2.6.0-test9

Linux Linux kernel=2.6.10-rc1

Linux Linux kernel=2.6.16.47

Linux Linux kernel=2.6.23.14

Linux Linux kernel=2.6.17.11

Linux Linux kernel=2.6.16.10

Linux Linux kernel=2.6.12.4

Linux Linux kernel=2.6.16.41

Linux Linux kernel=2.6.16.52

Linux Linux kernel=2.6.11.3

Linux Linux kernel=2.6.20.10

Linux Linux kernel=2.6.16.24

Linux Linux kernel=2.6.23

Linux Linux kernel=2.6.9-rc4

Linux Linux kernel=2.6.12.3

Linux Linux kernel=2.6.13-rc4

Linux Linux kernel=2.6.23.2

Linux Linux kernel=2.6.25.1

Linux Linux kernel=2.6.16_rc7

Linux Linux kernel=2.6.7

Linux Linux kernel=2.6.11-rc2

Linux Linux kernel=2.6.16.30

Linux Linux kernel=2.6.21.2

Linux Linux kernel=2.6.15.4

Linux Linux kernel=2.6.3-rc4

Linux Linux kernel=2.6.16.38

Linux Linux kernel=2.6.24-rc2

Linux Linux kernel=2.6.16.17

Linux Linux kernel=2.6.1-rc1

Linux Linux kernel=2.6.21-git1

Linux Linux kernel=2.6.20.2

Linux Linux kernel=2.6.16.12

Linux Linux kernel=2.6.6-rc1

Linux Linux kernel=2.6.16.27

Linux Linux kernel=2.6.16.53

Linux Linux kernel=2.6.18-rc7

Linux Linux kernel=2.6.12.6

Linux Linux kernel=2.6.17.7

Linux Linux kernel=2.6.20.1

Linux Linux kernel=2.6.11.7

Linux Linux kernel=2.6.5-rc2

Linux Linux kernel=2.6.16.2

Linux Linux kernel=2.6.18.6

Linux Linux kernel=2.6.15

Linux Linux kernel=2.6.16.44

Linux Linux kernel=2.6.12.22

Linux Linux kernel=2.6.15-rc6

Linux Linux kernel=2.6.16.35

Linux Linux kernel=2.6.16.50

Linux Linux kernel=2.6.15-rc1

Linux Linux kernel=2.6.16-rc3

Linux Linux kernel=2.6.18-rc6

Linux Linux kernel=2.6.23.5

Linux Linux kernel=2.6.14.2

Linux Linux kernel=2.6.14-rc4

Linux Linux kernel=2.6.18

Linux Linux kernel=2.6.19-rc2

Linux Linux kernel=2.6.20.4

Linux Linux kernel=2.6.0-test7

Linux Linux kernel=2.6.15-rc7

Linux Linux kernel=2.6.17.6

Linux Linux kernel=2.6.5-rc3

Linux Linux kernel=2.6.23.6

Linux Linux kernel=2.6.14-rc5

Linux Linux kernel=2.6.16.7

Linux Linux kernel=2.6.17.13

Linux Linux kernel=2.6.2-rc2

Linux Linux kernel=2.6.22-rc6

Linux Linux kernel=2.6.8.1

Linux Linux kernel=2.6.12-rc6

Linux Linux kernel=2.6.24.3

Linux Linux kernel=2.6.13-rc3

Linux Linux kernel=2.6.19-rc3

Linux Linux kernel=2.6.25

Linux Linux kernel=2.6.20.14

Linux Linux kernel=2.6.17-rc4

Linux Linux kernel=2.6.11-rc5

Linux Linux kernel=2.6.8-rc2

Linux Linux kernel=2.6.3-rc1

Linux Linux kernel=2.6.22.5

Linux Linux kernel=2.6.21-rc3

Linux Linux kernel=2.6.8-rc3

Linux Linux kernel=2.6.20.7

Linux Linux kernel=2.6.16.5

Linux Linux kernel=2.6.11.4

Linux Linux kernel=2.6.16.19

Linux Linux kernel=2.6.11.12

Linux Linux kernel=2.6.16.20

Linux Linux kernel=2.6.15.5

Linux Linux kernel=2.6.22.16

Linux Linux kernel=2.6.0-test8

Linux Linux kernel=2.6.11.1

Linux Linux kernel=2.6.16-rc2

Linux Linux kernel=2.6.18-rc1

Linux Linux kernel=2.6.21-git6

Linux Linux kernel=2.6.9

Linux Linux kernel=2.6.13.1

Linux Linux kernel=2.6.17-rc5

Linux Linux kernel=2.6.6

Linux Linux kernel=2.6.0-test3

Linux Linux kernel=2.6.12

Remediation

Patch Available

http://www.securityfocus.com/bid/29076

Event History

May 8, 2008

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1669?

CVE-2008-1669 has a medium severity level as it allows local users to exploit a race condition for privilege escalation.

How do I fix CVE-2008-1669?

To fix CVE-2008-1669, update the Linux kernel to version 2.6.25.2 or later.

What systems are affected by CVE-2008-1669?

CVE-2008-1669 affects various versions of the Linux kernel prior to 2.6.25.2.

What are the risks of not addressing CVE-2008-1669?

Not addressing CVE-2008-1669 may allow local users to execute arbitrary code and escalate their privileges on vulnerable systems.

Is there a known exploit for CVE-2008-1669?

Yes, CVE-2008-1669 has been documented to allow for exploitation through a race condition leveraging fcntl functionality.