CVE-2008-1375: canonical ubuntu_linux

Modified

Published 02-05-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-1375 is a medium (CVSS 6.9) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 23.5% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.9, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.31%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

DSA-1565-1 RHSA-2008:0211 RHSA-2008:0233 RHSA-2008:0237

Timeline

02-05-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.31%

Chance of exploitation in the next 30 days

Percentile

24%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.31% on 05-10-2026

05-10-202604-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Suse3 products

linux_enterprise_desktop10:sp1
linux_enterprise_server9 | 10:sp1
linux_enterprise_software_development_kit10:sp1

Canonical1 product

ubuntu_linuxEOL6.06 | 7.04 | 7.10 | 8.04

Debian1 product

debian_linuxEOL4.0

Fedoraproject1 product

fedoraEOL8

Linux1 product

linux_kernel≥ 2.6.0, < 2.6.24.6 | 2.6.25

Opensuse1 product

opensuse10.2 | 10.3

6 vendors · 8 products

References

45 links

marc.info?l=linux-kernel&m=120967963803205&w=2Mailing ListX Refsource MLISTPatchThird Party Advisory
secunia.com/advisories/30962Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1406/referencesVDB EntryX Refsource VUPENThird Party Advisory
wiki.rpath.com/wiki/Advisories:rPSA-2008-0157X Refsource CONFIRMBroken Link
www.securityfocus.com/bid/29003VDB EntryX Refsource BIDThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/42131VDB EntryX Refsource XFThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0237.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securitytracker.com/id?1019959VDB EntryX Refsource SECTRACKThird Party Advisory
www.vupen.com/english/advisories/2008/1452/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:167Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory

Show all 45 references

www.ubuntu.com/usn/usn-618-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.debian.org/security/2008/dsa-1565Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/30116Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0233.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/30110Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.vupen.com/english/advisories/2008/2222/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.securityfocus.com/archive/1/491732/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
marc.info?l=linux-kernel&m=120967964303224&w=2Mailing ListX Refsource MLISTPatchThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11843VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/30515Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/491566/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6X Refsource CONFIRMBroken Link
usn.ubuntu.com/614-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:105Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/30108Third Party AdvisoryX Refsource SECUNIA
www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4X Refsource CONFIRMBroken Link
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1X Refsource CONFIRMBroken Link
secunia.com/advisories/30044Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0211.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/30017Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30890Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-2501X Refsource CONFIRMBroken Link
secunia.com/advisories/30769Third Party AdvisoryX Refsource SECUNIA
lists.vmware.com/pipermail/security-announce/2008/000023.htmlMailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/30018Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:104Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/30260Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/31246Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30818Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/Advisories:rPSA-2008-0157X Refsource CONFIRMBroken Link
secunia.com/advisories/30112Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory