NVD

Id
2291  
Name
CVE-2008-2372  
Description
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption) via a large number of calls to the get_user_pages function, which lacks a ZERO_PAGE optimization and results in allocation of "useless newly zeroed pages."  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-07-02  
Modified Date
2012-11-26  
Seq
2008-2372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14732 2291 CVE-2008-2372 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=89f5b7da2a6bad2e84670422ab8192382a5aeb9f  View
14733 2291 CVE-2008-2372 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.9  View
14734 2291 CVE-2008-2372 SUSE-SA:2008:035  View
14735 2291 CVE-2008-2372 SUSE-SA:2008:037  View
14736 2291 CVE-2008-2372 SUSE-SA:2008:038  View
14737 2291 CVE-2008-2372 http://new-ubuntu-news.blogspot.com/2008/06/re-pending-stable-kernel-security_25.html  View
14738 2291 CVE-2008-2372 oval:org.mitre.oval:def:9383  View
14739 2291 CVE-2008-2372 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0207  View
14740 2291 CVE-2008-2372 RHSA-2008:0585  View
14741 2291 CVE-2008-2372 RHSA-2008:0957  View
14742 2291 CVE-2008-2372 USN-659-1  View
14743 2291 CVE-2008-2372 [linux-kernel] 20080430 Re: Page Faults slower in 2.6.25-rc9 than 2.6.23  View
14744 2291 CVE-2008-2372 linux-kernel-getuserpages-dos(43550)  View
14745 2291 CVE-2008-2372 https://issues.rpath.com/browse/RPL-2629  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46344 JVNDB-2008-001654 Linux kernel の get_user_pages 関数の呼び出し処理におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel には、get_user_pages 関数の呼び出し処理に不備があり、サービス運用妨害 (DoS) 状態の脆弱性が存在します。 CVE-2008-2372 32485 CVE-2008-2372 2291 4.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001654.html 2008-07-02 2009-02-05 View