CVE-2008-2137: Medium severity linux kernel vulnerability

Published May 29, 2008

Updated

The (1) sparcmmapcheck function in arch/sparc/kernel/syssparc.c and the (2) sparc64mmapcheck function in arch/sparc64/kernel/syssparc.c, in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3, omit some virtual-address range (aka span) checks when the mmap MAPFIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mmap calls.

Affected Software

116 affected components

Linux Linux kernel=2.6.20.9

Linux Linux kernel=2.6.11

Linux Linux kernel=2.6.23.4

Linux Linux kernel=2.6.22.15

Linux Linux kernel=2.6.17.12

Linux Linux kernel=2.6.21

Linux Linux kernel=2.6.12.12

Linux Linux kernel=2.6.5

Linux Linux kernel=2.6.15.3

Linux Linux kernel=2.6.1

Linux Linux kernel=2.6.20.13

Linux Linux kernel=2.6.22.4

Linux Linux kernel=2.6.13

Linux Linux kernel=2.6.17.2

Linux Linux kernel=2.6.13.3

Linux Linux kernel=2.6.11.8

Linux Linux kernel=2.6.24.2

Linux Linux kernel=2.6.23.7

Linux Linux kernel=2.6.17.8

Linux Linux kernel=2.6.14.4

Linux Linux kernel=2.6.14

Linux Linux kernel=2.6.17.14

Linux Linux kernel=2.6.10

Linux Linux kernel=2.6.22.12

Linux Linux kernel=2.6.14.3

Linux Linux kernel=2.6.18.3

Linux Linux kernel=2.6.11.6

Linux Linux kernel=2.6.11.11

Linux Linux kernel=2.6.16.13

Linux Linux kernel=2.6.3

Linux Linux kernel=2.6.21.6

Linux Linux kernel=2.6.17.3

Linux Linux kernel=2.6.24.1

Linux Linux kernel=2.6.20.5

Linux Linux kernel=2.6.22

Linux Linux kernel=2.6.4

Linux Linux kernel=2.6.15.1

Linux Linux kernel=2.6.11.5

Linux Linux kernel=2.6.19.1

Linux Linux kernel=2.6.18.4

Linux Linux kernel=2.6.18.1

Linux Linux kernel=2.6.23.1

Linux Linux kernel=2.6.2

Linux Linux kernel=2.6.14.5

Linux Linux kernel=2.6.13.2

Linux Linux kernel=2.6.17.5

Linux Linux kernel=2.6.21.1

Linux Linux kernel=2.6.17

Linux Linux kernel=2.6.19.2

Linux Linux kernel=2.6.21.4

Linux Linux kernel=2.6.8

Linux Linux kernel=2.6.17.10

Linux Linux kernel=2.6.15.11

Linux Linux kernel=2.6.14.1

Linux Linux kernel=2.6.12.5

Linux Linux kernel=2.6.20

Linux Linux kernel=2.6.22.7

Linux Linux kernel=2.6.12.1

Linux Linux kernel=2.6.17.1

Linux Linux kernel=2.6.20.8

Linux Linux kernel=2.6.20.15

Linux Linux kernel=2.6.0

Linux Linux kernel=2.6.13.4

Linux Linux kernel=2.6.23.9

Linux Linux kernel=2.6.22.6

Linux Linux kernel=2.6.23.3

Linux Linux kernel=2.6.22.3

Linux Linux kernel=2.6.12.2

Debian Debian Linux=4.0

Linux Linux kernel=2.6.20.11

Linux Linux kernel=2.6.19

Linux Linux kernel=2.6.20.3

Linux Linux kernel=2.6.16

Linux Linux kernel=2.6.22.13

Linux Linux kernel=2.6.15.2

Linux Linux kernel=2.6.22.17

Linux Linux kernel=2.6.23.14

Linux Linux kernel=2.6.17.11

Linux Linux kernel=2.6.12.4

Linux Linux kernel=2.6.22.11

Linux Linux kernel=2.6.23

Linux Linux kernel=2.6.12.3

Linux Linux kernel=2.6.23.2

Linux Linux kernel=2.6.25.1

Linux Linux kernel=2.6.7

Linux Linux kernel=2.6.21.7

Linux Linux kernel=2.6.21.2

Linux Linux kernel=2.6.15.4

Linux Linux kernel=2.6.20.2

Linux Linux kernel=2.6.16.27

Linux Linux kernel=2.6.12.6

Linux Linux kernel=2.6.17.7

Linux Linux kernel=2.6.20.1

Linux Linux kernel=2.6.11.7

Linux Linux kernel=2.6.15

Linux Linux kernel=2.6.12.22

Linux Linux kernel=2.6.23.5

Linux Linux kernel=2.6.22.8

Linux Linux kernel=2.6.14.2

Linux Linux kernel=2.6.18

Linux Linux kernel=2.6.20.4

Linux Linux kernel=2.6.17.6

Linux Linux kernel=2.6.23.6

Linux Linux kernel=2.6.17.13

Linux Linux kernel=2.6.25

Linux Linux kernel=2.6.25.2

Linux Linux kernel=2.6.22.5

Linux Linux kernel=2.6.11.4

Linux Linux kernel=2.6.11.12

Linux Linux kernel=2.6.15.5

Linux Linux kernel=2.6.22.16

Linux Linux kernel=2.6.9

Linux Linux kernel=2.6.13.1

Linux Linux kernel=2.6.22.14

Linux Linux kernel=2.6.6

Linux Linux kernel=2.6.12

Event History

May 29, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2137?

CVE-2008-2137 has a medium severity level due to the potential for local privilege escalation.

How do I fix CVE-2008-2137?

To fix CVE-2008-2137, you should upgrade your Linux kernel to version 2.4.36.5 or 2.6.25.3 or later.

Which Linux kernel versions are affected by CVE-2008-2137?

CVE-2008-2137 affects Linux kernel versions 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3.

What type of vulnerability is CVE-2008-2137?

CVE-2008-2137 is a vulnerability related to insufficient span checks in the mmap function.

Is CVE-2008-2137 remote exploit-related?

CVE-2008-2137 is not a remote exploit but rather requires local access for exploitation.