CVE-2008-7316: Input Validation
A flaw was discovered in Linux kernel. Zero length iovecs can go into an infinite loop in writev, because the iovec iterator does not always advance over them.
CVE assignment:
http://seclists.org/oss-sec/2016/q1/189
Upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=124d3b7041f9a0ca7c43a6293e1cae4576c32fd5
Other sources
mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-7316?
CVE-2008-7316 is classified as a medium severity vulnerability due to its potential to cause denial-of-service through an infinite loop.
How do I fix CVE-2008-7316?
To fix CVE-2008-7316, you should upgrade the Linux kernel to version 2.6.25 or later, which contains the necessary patch.
What systems are affected by CVE-2008-7316?
CVE-2008-7316 affects the Linux kernel versions up to and including 2.6.24.
Can CVE-2008-7316 lead to data loss?
While CVE-2008-7316 primarily leads to denial-of-service, it can indirectly cause data loss if the service being interrupted involves data operation.
What is the exploitability of CVE-2008-7316?
CVE-2008-7316 can be exploited by local users who can trigger infinite loops in the writev function, causing service disruptions.