CVE-2008-3915: linux linux_kernel

Modified

Published 09-09-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-3915 is a high (CVSS 9.3) vulnerability in linux linux_kernel. EPSS estimates a 4.35% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 9.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

4.35%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2

DSA-1636-1 RHSA-2008:0857

Timeline

09-09-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

4.35%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.35% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.6.18 | 2.6.19.4 | 2.6.19.5 | 2.6.19.7 | 2.6.20.16 | 2.6.20.17 | 2.6.20.18 | 2.6.20.19 | 2.6.20.20 | 2.6.20.21 | 2.6.21.5 | 2.6.21.6 | 2.6.21.7 | 2.6.22 | 2.6.22.2 | 2.6.22.8 | 2.6.22.9 | 2.6.22.10 | 2.6.22.11 | 2.6.22.12 | 2.6.22.13 | 2.6.22.14 | 2.6.22.15 | 2.6.22.17 | 2.6.22.18 | 2.6.22.19 | 2.6.22.20 | 2.6.22.21 | 2.6.22.22 | 2.6.23 | 2.6.23.8 | 2.6.23.9 | 2.6.23.10 | 2.6.23.11 | 2.6.23.12 | 2.6.23.13 | 2.6.23.15 | 2.6.23.16 | 2.6.23.17 | 2.6.24 | 2.6.24.1 | 2.6.24.2 | 2.6.24.3 | 2.6.24.4 | 2.6.24.5 | 2.6.24.6 | 2.6.24.7 | 2.6.25 | 2.6.25.1 | 2.6.25.2 | 2.6.25.3 | 2.6.25.4 | 2.6.25.5 | 2.6.25.6 | 2.6.25.7 | 2.6.25.8 | 2.6.25.9 | 2.6.25.10 | 2.6.25.11 | 2.6.25.12 | 2.6.25.13 | 2.6.25.14 | 2.6.25.15

1 vendor · 1 product

References

14 links

www.openwall.com/lists/oss-security/2008/09/04/4Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2008/09/04/18Mailing ListX Refsource MLIST
secunia.com/advisories/32190Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32393Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1636Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/31881Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-659-1Vendor AdvisoryX Refsource UBUNTU
lkml.org/lkml/2008/9/3/286Mailing ListX Refsource MLIST
git.kernel.orgX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2008-0857.htmlVendor AdvisoryX Refsource REDHAT

Show all 14 references

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4X Refsource CONFIRM
www.securityfocus.com/bid/31133VDB EntryX Refsource BID
bugzilla.redhat.com/show_bug.cgi?id=461101X Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/45055VDB EntryX Refsource XF