CVE-2008-3833: Medium severity linux kernel vulnerability
Description of problem: Originally from Mark Fasheh <mark.fasheh>
genericfilesplicewrite() does not remove SISUID or SISGID. This is inconsistent with the way we generally write to files.
Proposed upstream patch: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8c34e2d63231d4bf4852bac8521883944d770fe3
Other sources
The genericfilesplicewrite function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3833?
The severity of CVE-2008-3833 is classified as medium due to potential security implications in file handling.
How do I fix CVE-2008-3833?
To fix CVE-2008-3833, apply the appropriate patches provided by your Linux distribution for the affected kernel versions.
Which Linux kernel versions are affected by CVE-2008-3833?
CVE-2008-3833 affects multiple kernel versions including 2.6.18-rc1 through 2.6.26, among others.
What happens if CVE-2008-3833 is exploited?
If exploited, CVE-2008-3833 could allow unauthorized users to retain the S_ISUID or S_ISGID flags, potentially escalating privileges.
Is CVE-2008-3833 a local or remote vulnerability?
CVE-2008-3833 is considered a local vulnerability, as it requires local system access to exploit.