CVE-2008-2137
First published: Thu May 29 2008(Updated: )
The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | =2.6.20.9 | |
| Linux Kernel | =2.6.11 | |
| Linux Kernel | =2.6.23.4 | |
| Linux Kernel | =2.6.22.15 | |
| Linux Kernel | =2.6.17.12 | |
| Linux Kernel | =2.6.21 | |
| Linux Kernel | =2.6.12.12 | |
| Linux Kernel | =2.6.5 | |
| Linux Kernel | =2.6.15.3 | |
| Linux Kernel | =2.6.1 | |
| Linux Kernel | =2.6.20.13 | |
| Linux Kernel | =2.6.22.4 | |
| Linux Kernel | =2.6.13 | |
| Linux Kernel | =2.6.17.2 | |
| Linux Kernel | =2.6.13.3 | |
| Linux Kernel | =2.6.11.8 | |
| Linux Kernel | =2.6.24.2 | |
| Linux Kernel | =2.6.23.7 | |
| Linux Kernel | =2.6.17.8 | |
| Linux Kernel | =2.6.14.4 | |
| Linux Kernel | =2.6.14 | |
| Linux Kernel | =2.6.17.14 | |
| Linux Kernel | =2.6.10 | |
| Linux Kernel | =2.6.22.12 | |
| Linux Kernel | =2.6.14.3 | |
| Linux Kernel | =2.6.18.3 | |
| Linux Kernel | =2.6.11.6 | |
| Linux Kernel | =2.6.11.11 | |
| Linux Kernel | =2.6.16.13 | |
| Linux Kernel | =2.6.3 | |
| Linux Kernel | =2.6.21.6 | |
| Linux Kernel | =2.6.17.3 | |
| Linux Kernel | =2.6.24.1 | |
| Linux Kernel | =2.6.20.5 | |
| Linux Kernel | =2.6.22 | |
| Linux Kernel | =2.6.4 | |
| Linux Kernel | =2.6.15.1 | |
| Linux Kernel | =2.6.11.5 | |
| Linux Kernel | =2.6.19.1 | |
| Linux Kernel | =2.6.18.4 | |
| Linux Kernel | =2.6.18.1 | |
| Linux Kernel | =2.6.23.1 | |
| Linux Kernel | =2.6.2 | |
| Linux Kernel | =2.6.14.5 | |
| Linux Kernel | =2.6.13.2 | |
| Linux Kernel | =2.6.17.5 | |
| Linux Kernel | =2.6.21.1 | |
| Linux Kernel | =2.6.17 | |
| Linux Kernel | =2.6.19.2 | |
| Linux Kernel | =2.6.21.4 | |
| Linux Kernel | =2.6.8 | |
| Linux Kernel | =2.6.17.10 | |
| Linux Kernel | =2.6.15.11 | |
| Linux Kernel | =2.6.14.1 | |
| Linux Kernel | =2.6.12.5 | |
| Linux Kernel | =2.6.20 | |
| Linux Kernel | =2.6.22.7 | |
| Linux Kernel | =2.6.12.1 | |
| Linux Kernel | =2.6.17.1 | |
| Linux Kernel | =2.6.20.8 | |
| Linux Kernel | =2.6.20.15 | |
| Linux Kernel | =2.6.0 | |
| Linux Kernel | =2.6.13.4 | |
| Linux Kernel | =2.6.23.9 | |
| Linux Kernel | =2.6.22.6 | |
| Linux Kernel | =2.6.23.3 | |
| Linux Kernel | =2.6.22.3 | |
| Linux Kernel | =2.6.12.2 | |
| Debian GNU/Linux | =4.0 | |
| Linux Kernel | =2.6.20.11 | |
| Linux Kernel | =2.6.19 | |
| Linux Kernel | =2.6.20.3 | |
| Linux Kernel | =2.6.16 | |
| Linux Kernel | =2.6.22.13 | |
| Linux Kernel | =2.6.15.2 | |
| Linux Kernel | =2.6.22.17 | |
| Linux Kernel | =2.6.23.14 | |
| Linux Kernel | =2.6.17.11 | |
| Linux Kernel | =2.6.12.4 | |
| Linux Kernel | =2.6.22.11 | |
| Linux Kernel | =2.6.23 | |
| Linux Kernel | =2.6.12.3 | |
| Linux Kernel | =2.6.23.2 | |
| Linux Kernel | =2.6.25.1 | |
| Linux Kernel | =2.6.7 | |
| Linux Kernel | =2.6.21.7 | |
| Linux Kernel | =2.6.21.2 | |
| Linux Kernel | =2.6.15.4 | |
| Linux Kernel | =2.6.20.2 | |
| Linux Kernel | =2.6.16.27 | |
| Linux Kernel | =2.6.12.6 | |
| Linux Kernel | =2.6.17.7 | |
| Linux Kernel | =2.6.20.1 | |
| Linux Kernel | =2.6.11.7 | |
| Linux Kernel | =2.6.15 | |
| Linux Kernel | =2.6.12.22 | |
| Linux Kernel | =2.6.23.5 | |
| Linux Kernel | =2.6.22.8 | |
| Linux Kernel | =2.6.14.2 | |
| Linux Kernel | =2.6.18 | |
| Linux Kernel | =2.6.20.4 | |
| Linux Kernel | =2.6.17.6 | |
| Linux Kernel | =2.6.23.6 | |
| Linux Kernel | =2.6.17.13 | |
| Linux Kernel | =2.6.25 | |
| Linux Kernel | =2.6.25.2 | |
| Linux Kernel | =2.6.22.5 | |
| Linux Kernel | =2.6.11.4 | |
| Linux Kernel | =2.6.11.12 | |
| Linux Kernel | =2.6.15.5 | |
| Linux Kernel | =2.6.22.16 | |
| Linux Kernel | =2.6.9 | |
| Linux Kernel | =2.6.13.1 | |
| Linux Kernel | =2.6.22.14 | |
| Linux Kernel | =2.6.6 | |
| Linux Kernel | =2.6.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://kerneltrap.org/mailarchive/git-commits-head/2008/5/8/1760604
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3
- http://www.debian.org/security/2008/dsa-1588
- http://www.securityfocus.com/bid/29397
- http://secunia.com/advisories/30368
- http://secunia.com/advisories/31107
- http://www.ubuntu.com/usn/usn-625-1
- http://secunia.com/advisories/30499
- http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.5
- http://www.vupen.com/english/advisories/2008/1716/references
- http://www.securitytracker.com/id?1020119
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42681
Frequently Asked Questions
What is the severity of CVE-2008-2137?
CVE-2008-2137 has a medium severity level due to the potential for local privilege escalation.
How do I fix CVE-2008-2137?
To fix CVE-2008-2137, you should upgrade your Linux kernel to version 2.4.36.5 or 2.6.25.3 or later.
Which Linux kernel versions are affected by CVE-2008-2137?
CVE-2008-2137 affects Linux kernel versions 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3.
What type of vulnerability is CVE-2008-2137?
CVE-2008-2137 is a vulnerability related to insufficient span checks in the mmap function.
Is CVE-2008-2137 remote exploit-related?
CVE-2008-2137 is not a remote exploit but rather requires local access for exploitation.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.20.9
- version/linux kernel/2.6.11
- version/linux kernel/2.6.23.4
- version/linux kernel/2.6.22.15
- version/linux kernel/2.6.17.12
- version/linux kernel/2.6.21
- version/linux kernel/2.6.12.12
- version/linux kernel/2.6.5
- version/linux kernel/2.6.15.3
- version/linux kernel/2.6.1
- version/linux kernel/2.6.20.13
- version/linux kernel/2.6.22.4
- version/linux kernel/2.6.13
- version/linux kernel/2.6.17.2
- version/linux kernel/2.6.13.3
- version/linux kernel/2.6.11.8
- version/linux kernel/2.6.24.2
- version/linux kernel/2.6.23.7
- version/linux kernel/2.6.17.8
- version/linux kernel/2.6.14.4
- version/linux kernel/2.6.14
- version/linux kernel/2.6.17.14
- version/linux kernel/2.6.10
- version/linux kernel/2.6.22.12
- version/linux kernel/2.6.14.3
- version/linux kernel/2.6.18.3
- version/linux kernel/2.6.11.6
- version/linux kernel/2.6.11.11
- version/linux kernel/2.6.16.13
- version/linux kernel/2.6.3
- version/linux kernel/2.6.21.6
- version/linux kernel/2.6.17.3
- version/linux kernel/2.6.24.1
- version/linux kernel/2.6.20.5
- version/linux kernel/2.6.22
- version/linux kernel/2.6.4
- version/linux kernel/2.6.15.1
- version/linux kernel/2.6.11.5
- version/linux kernel/2.6.19.1
- version/linux kernel/2.6.18.4
- version/linux kernel/2.6.18.1
- version/linux kernel/2.6.23.1
- version/linux kernel/2.6.2
- version/linux kernel/2.6.14.5
- version/linux kernel/2.6.13.2
- version/linux kernel/2.6.17.5
- version/linux kernel/2.6.21.1
- version/linux kernel/2.6.17
- version/linux kernel/2.6.19.2
- version/linux kernel/2.6.21.4
- version/linux kernel/2.6.8
- version/linux kernel/2.6.17.10
- version/linux kernel/2.6.15.11
- version/linux kernel/2.6.14.1
- version/linux kernel/2.6.12.5
- version/linux kernel/2.6.20
- version/linux kernel/2.6.22.7
- version/linux kernel/2.6.12.1
- version/linux kernel/2.6.17.1
- version/linux kernel/2.6.20.8
- version/linux kernel/2.6.20.15
- version/linux kernel/2.6.0
- version/linux kernel/2.6.13.4
- version/linux kernel/2.6.23.9
- version/linux kernel/2.6.22.6
- version/linux kernel/2.6.23.3
- version/linux kernel/2.6.22.3
- version/linux kernel/2.6.12.2
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/4.0
- version/linux kernel/2.6.20.11
- version/linux kernel/2.6.19
- version/linux kernel/2.6.20.3
- version/linux kernel/2.6.16
- version/linux kernel/2.6.22.13
- version/linux kernel/2.6.15.2
- version/linux kernel/2.6.22.17
- version/linux kernel/2.6.23.14
- version/linux kernel/2.6.17.11
- version/linux kernel/2.6.12.4
- version/linux kernel/2.6.22.11
- version/linux kernel/2.6.23
- version/linux kernel/2.6.12.3
- version/linux kernel/2.6.23.2
- version/linux kernel/2.6.25.1
- version/linux kernel/2.6.7
- version/linux kernel/2.6.21.7
- version/linux kernel/2.6.21.2
- version/linux kernel/2.6.15.4
- version/linux kernel/2.6.20.2
- version/linux kernel/2.6.16.27
- version/linux kernel/2.6.12.6
- version/linux kernel/2.6.17.7
- version/linux kernel/2.6.20.1
- version/linux kernel/2.6.11.7
- version/linux kernel/2.6.15
- version/linux kernel/2.6.12.22
- version/linux kernel/2.6.23.5
- version/linux kernel/2.6.22.8
- version/linux kernel/2.6.14.2
- version/linux kernel/2.6.18
- version/linux kernel/2.6.20.4
- version/linux kernel/2.6.17.6
- version/linux kernel/2.6.23.6
- version/linux kernel/2.6.17.13
- version/linux kernel/2.6.25
- version/linux kernel/2.6.25.2
- version/linux kernel/2.6.22.5
- version/linux kernel/2.6.11.4
- version/linux kernel/2.6.11.12
- version/linux kernel/2.6.15.5
- version/linux kernel/2.6.22.16
- version/linux kernel/2.6.9
- version/linux kernel/2.6.13.1
- version/linux kernel/2.6.22.14
- version/linux kernel/2.6.6
- version/linux kernel/2.6.12