#VU95737 Null pointer dereference in Linux kernel - CVE-2008-2812
Vulnerability identifier: #VU95737
Vulnerability risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-476
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to execute arbitrary code.
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel: All versions
External links
https://www.openwall.com/lists/oss-security/2008/07/03/2
https://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10
https://www.securityfocus.com/bid/30076
https://secunia.com/advisories/31202
https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
https://secunia.com/advisories/31614
https://www.redhat.com/support/errata/RHSA-2008-0665.html
https://www.redhat.com/support/errata/RHSA-2008-0612.html
https://secunia.com/advisories/31341
https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
https://secunia.com/advisories/31229
https://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html
https://support.avaya.com/elmodocs2/security/ASA-2008-365.htm
https://secunia.com/advisories/31685
https://secunia.com/advisories/31551
https://www.debian.org/security/2008/dsa-1630
https://secunia.com/advisories/31048
https://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
https://secunia.com/advisories/32759
https://www.redhat.com/support/errata/RHSA-2008-0973.html
https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
https://secunia.com/advisories/33201
https://secunia.com/advisories/32103
https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
https://www.vupen.com/english/advisories/2008/2063/references
https://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
https://secunia.com/advisories/32370
https://secunia.com/advisories/30982
https://exchange.xforce.ibmcloud.com/vulnerabilities/43687
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632
https://usn.ubuntu.com/637-1/
https://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f329dce788
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
