National Cyber-Alert System

Vulnerability Summary for CVE-2008-5029

Overview

The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 32154

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/32154

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=470201

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=470201

External Source: UBUNTU

Name: USN-679-1

Hyperlink:http://www.ubuntu.com/usn/usn-679-1

External Source: SECTRACK

Name: 1021511

Hyperlink:http://www.securitytracker.com/id?1021511

External Source: SECTRACK

Name: 1021292

Hyperlink:http://www.securitytracker.com/id?1021292

External Source: BID

Name: 33079

Hyperlink:http://www.securityfocus.com/bid/33079

External Source: BUGTRAQ

Name: 20090101 Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/499700/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:0225

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0225.html

External Source: REDHAT

Name: RHSA-2009:0014

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0014.html

External Source: REDHAT

Name: RHSA-2009:0009

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0009.html

External Source: MLIST

Name: [oss-security] 20081106 CVE request: kernel: Unix sockets kernel panic

Hyperlink:http://www.openwall.com/lists/oss-security/2008/11/06/1

External Source: MANDRIVA

Name: MDVSA-2008:234

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:234

External Source: DEBIAN

Name: DSA-1687

Hyperlink:http://www.debian.org/security/2008/dsa-1687

External Source: DEBIAN

Name: DSA-1681

Hyperlink:http://www.debian.org/security/2008/dsa-1681

External Source: SREASON

Name: 4573

Hyperlink:http://securityreason.com/securityalert/4573

External Source: SECUNIA

Name: 33704

Hyperlink:http://secunia.com/advisories/33704

External Source: SECUNIA

Name: 33641

Hyperlink:http://secunia.com/advisories/33641

External Source: SECUNIA

Name: 33623

Hyperlink:http://secunia.com/advisories/33623

External Source: SECUNIA

Name: 33586

Hyperlink:http://secunia.com/advisories/33586

External Source: SECUNIA

Name: 33556

Hyperlink:http://secunia.com/advisories/33556

External Source: SECUNIA

Name: 33180

Hyperlink:http://secunia.com/advisories/33180

External Source: SECUNIA

Name: 32998

Hyperlink:http://secunia.com/advisories/32998

External Source: SECUNIA

Name: 32918

Hyperlink:http://secunia.com/advisories/32918

External Source: MLIST

Name: [linux-netdev] 20081106 UNIX sockets kernel panic

Hyperlink:http://marc.info/?l=linux-netdev&m=122593044330973&w=2

External Source: SUSE

Name: SUSE-SA:2009:008

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

External Source: SUSE

Name: SUSE-SA:2009:004

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

External Source: SUSE

Name: SUSE-SA:2008:057

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

External Source: MISC

Name: http://darkircop.org/unix.c

Hyperlink:http://darkircop.org/unix.c