CVE-2008-3535: Medium severity linux kernel vulnerability
Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3535?
CVE-2008-3535 has been designated a medium severity level due to its ability to cause a denial of service.
How do I fix CVE-2008-3535?
To mitigate CVE-2008-3535, upgrade your Linux kernel to version 2.6.27 or later.
Which systems are affected by CVE-2008-3535?
CVE-2008-3535 affects Linux kernel versions prior to 2.6.27 and Debian 4.0 and various Ubuntu versions.
What type of attack does CVE-2008-3535 facilitate?
CVE-2008-3535 can facilitate a denial of service attack resulting in a system crash.
Is CVE-2008-3535 an exploit that requires remote access?
No, CVE-2008-3535 requires local user access to exploit the vulnerability.