CVE-2008-3534: Medium severity linux kernel vulnerability
The shmemdeleteinode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of "useless pages" and improper maintenance of the iblocks count.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3534?
CVE-2008-3534 has a moderate severity level as it can lead to a denial of service through crashes caused by specific file operations.
How do I fix CVE-2008-3534?
To fix CVE-2008-3534, users should update their Linux kernel to version 2.6.26.1 or later.
Who is affected by CVE-2008-3534?
CVE-2008-3534 affects local users of the Linux kernel versions prior to 2.6.26.1 on systems using tmpfs.
What systems are impacted by CVE-2008-3534?
CVE-2008-3534 impacts various Linux distributions such as Debian 4.0 and Ubuntu versions 6.06, 7.10, and 8.04.
What type of vulnerability is CVE-2008-3534?
CVE-2008-3534 is categorized as a denial of service vulnerability due to file operation sequences causing system crashes.