CVE-2008-5029: Medium severity linux kernel vulnerability
Published Nov 6, 2008
·Updated
http://marc.info/?l=linux-netdev&m=122593044330973&w=2
"The following code causes a kernel panic on Linux 2.6.26: http://darkircop.org/unix.c
I haven't investigated the bug so I'm not sure what is causing it, and don't know if it's exploitable. The code passes unix sockets from one process to another using unix sockets. The bug probably has to do with closing file descriptors."
Other sources
The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCMRIGHTS message through a UNIX domain socket and closing file descriptors.
— Red Hat
Affected Software
117 affected componentsFixes available
redhat/kernel-rt<0:2.6.24.7-93.el5
0:2.6.24.7-93.el5
redhat/kernel<0:2.6.18-128.el5
0:2.6.18-128.el5
redhat/kernel<0:2.6.18-92.1.24.el5
0:2.6.18-92.1.24.el5
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.26-rc4
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.22.15
Linux Linux kernel=2.6.27.3
Linux Linux kernel=2.6.27.1
Linux Linux kernel=2.6.24.7
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.23.13
Linux Linux kernel=2.6.24.2
Linux Linux kernel=2.4.36.6
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.26.5
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.22.21
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.23.8
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.22.12
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.6.21.6
Linux Linux kernel=2.4.36.2
Linux Linux kernel=2.6.22.1
Linux Linux kernel=2.6.23.16
Linux Linux kernel=2.6.24.1
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.22
Linux Linux kernel=2.6.26
Linux Linux kernel=2.6.26.3
Linux Linux kernel=2.6.20.16
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.27
Linux Linux kernel=2.6.19.4
Linux Linux kernel=2.6.25.13
Linux Linux kernel=2.6.20.21
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.4.36.1
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.24
Linux Linux kernel=2.6.26.2
Linux Linux kernel=2.6.20.17
Linux Linux kernel=2.6.21.5
Linux Linux kernel=2.6.25.15
Linux Linux kernel=2.6.24_rc4
Linux Linux kernel=2.6.23.15
Linux Linux kernel=2.6.23.10
Linux Linux kernel=2.4.36.4
Linux Linux kernel=2.6.26.1
Linux Linux kernel=2.6.20.20
Linux Linux kernel<=2.6.27.4
Linux Linux kernel=2.6.22.18
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.4.36.3
Linux Linux kernel=2.6.22.20
Linux Linux kernel=2.6.20.18
Linux Linux kernel=2.6.23.9
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.24.4
Linux Linux kernel=2.6.25.16
Linux Linux kernel=2.6.22.9
Linux Linux kernel=2.6.25.17
Linux Linux kernel=2.6.22.13
Linux Linux kernel=2.6.19.7
Linux Linux kernel=2.6.24.5
Linux Linux kernel=2.6.24_rc1
Linux Linux kernel=2.6.20.19
Linux Linux kernel=2.6.22.17
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6.22.11
Linux Linux kernel=2.6.23
Linux Linux kernel=2.6.22.10
Linux Linux kernel=2.6.23.17
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.21.7
Linux Linux kernel=2.6.23_rc1
Linux Linux kernel=2.6.22.22
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.24.6
Linux Linux kernel=2.6.22_rc7
Linux Linux kernel=2.4.36
Linux Linux kernel=2.6.23.12
Linux Linux kernel=2.6.24_rc5
Linux Linux kernel=2.6.19.6
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.18-rc6
Linux Linux kernel=2.6.22.8
Linux Linux kernel=2.6.19.5
Linux Linux kernel=2.6.18
Linux Linux kernel=2.4.36.5
Linux Linux kernel=2.6.27.2
Linux Linux kernel=2.6.22.2
Linux Linux kernel=2.2.27
Linux Linux kernel=2.6.22.19
Linux Linux kernel=2.6.24.3
Linux Linux kernel=2.6.22_rc1
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.6.25.14
Linux Linux kernel=2.6.26.4
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.23.11
Linux Linux kernel=2.6.22.14
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6
Remediation
Patch Available
Event History
Nov 6, 2008
CVE Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·09:07 AM
DescriptionSeverityAffected Software
Nov 10, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
Is there a workaround for CVE-2008-5029?
There is no reliable workaround for CVE-2008-5029 other than applying the appropriate updates.